| |
| |||||||
Log-Analyse und Auswertung: Malwarebytes: 360 PUP´s & Trojan.Agent.FSAWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
21.01.2016, 11:31
| #1 |
 |  Malwarebytes: 360 PUP´s & Trojan.Agent.FSA Hallo, ich habe mir gestern vorgenommen, mienen Laptop mal wieder richtig "aufzuräumen", da er immer langsamer wurde. Heute morgen habe ich dann einmal den Avast Systemscan durchgeführt, bei dem mir ein Virus mit dem Namen: LinkuryInstaller_p1v9.exe und der Virusbezeichnung: Win32:Adware-gen[ADW] angezeigt wurde. Diesen habe ich einfach in den "Container" verschieben lassen und habe mir nicht viel dabei gedacht. Danach habe habe ich noch einmal Malwarebytes durchlaufen lassen. Dieser Suchlauf ergab 360! PUP´s und einen Trojaner.   Die Suchlaufergebnisse werde ich anhängen. Wie soll ich nun am besten vorgehen? Danke Luca |
|
21.01.2016, 12:45
| #2 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA Hi und
__________________ Logs bitte nicht anhängen, notfalls splitten und über mehrere Postings verteilt posten  Lesestoff:Posten in CODE-Tags Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit. Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
__________________ |
|
21.01.2016, 12:53
| #3 |
| | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA Ok, hier nochmal richtig
__________________ Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlaufdatum: 21.01.2016 Suchlaufzeit: 10:19 Protokolldatei: Malwarebytes 1. Scan 21.01.16.txt Administrator: Ja Version: 2.2.0.1024 Malware-Datenbank: v2016.01.21.01 Rootkit-Datenbank: v2016.01.20.01 Lizenz: Kostenlose Version Malware-Schutz: Deaktiviert Schutz vor bösartigen Websites: Deaktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: C660 Suchlauftyp: Bedrohungssuchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 526606 Abgelaufene Zeit: 40 Min., 45 Sek. Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (keine bösartigen Elemente erkannt) Module: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 22 PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}, , [59ecdc60bbde79bd4f57028ab05219e7], PUP.Optional.Iminent, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}, , [59ecdc60bbde79bd4f57028ab05219e7], PUP.Optional.SnapDo, HKU\S-1-5-21-2557430510-3623771520-2665204530-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{006ee092-9658-4fd6-bd8e-a21a348e59f5}, , [4df8390390091e1878d1f8827191c040], PUP.Optional.FreeRipTB, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{E634228A-03CF-4BC8-B0AB-668257F1FD8C}, , [2223d864fa9f48eea9050379d03213ed], PUP.Optional.FreeRipTB, HKU\S-1-5-21-2557430510-3623771520-2665204530-501\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXT\SETTINGS\{E634228A-03CF-4BC8-B0AB-668257F1FD8C}, , [2223d864fa9f48eea9050379d03213ed], PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{68B81CCD-A80C-4060-8947-5AE69ED01199}, , [61e42c104d4c989e988f1667966caf51], PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{E6B969FB-6D33-48d2-9061-8BBD4899EB08}, , [f5506cd01287e55188a4d9a46b97966a], PUP.Optional.ConduitTB.Gen, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1}, , [0342b587732687af112bd2e6dc27c43c], PUP.Optional.ConduitTB.Gen, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}, , [0342b587732687af112bd2e6dc27c43c], PUP.Optional.SearchResults, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}, , [77ce44f8356486b08236a43a699aa25e], PUP.Optional.OpenCandy, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\OpenCandyHelperRunOnce, , [341164d8e8b1989edd08ac2929da43bd], PUP.Optional.Bandoo.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CBCB7D2F-3CB5-48A9-87BA-E549F352333A}, , [ee57320ae5b4db5b326a65c6d52ff40c], PUP.Optional.SearchResults, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}, , [99acc17b5a3fd2645d5b3da1a1628a76], PUP.Optional.Conduit, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}, , [ab9a1e1eb1e895a136facfe908fbf10f], PUP.Optional.PriceGong, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\APPDATALOW\SOFTWARE\PriceGong, , [fe4785b7c0d9e84ee669a534c83be11f], PUP.Optional.SerachQU, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\APPDATALOW\SOFTWARE\searchqutoolbar, , [a0a5db61f3a603330ae8e6f920e38878], PUP.Optional.Spigot, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0A55001B-3E7B-4516-9318-C6BBFDC4C909}, , [ed580f2defaa8fa70a503aa9de25d729], PUP.Optional.SearchResults, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}, , [ac99df5d25744fe75a5de2fc5ca734cc], PUP.Optional.Conduit, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}, , [ac99db6190093ef844dfbcfc63a024dc], PUP.Optional.Spigot, HKU\S-1-5-21-2557430510-3623771520-2665204530-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0A55001B-3E7B-4516-9318-C6BBFDC4C909}, , [91b41b218b0e95a10159c81b3fc4f50b], PUP.Optional.SearchResults, HKU\S-1-5-21-2557430510-3623771520-2665204530-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}, , [11345be13168ae884d6a5f7fd72c54ac], PUP.Optional.Conduit, HKU\S-1-5-21-2557430510-3623771520-2665204530-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}, , [4afb023a4b4e94a2cb582f89a06317e9], Registrierungswerte: 21 PUP.Optional.DVDVideoSoftTB, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}, , [370e0d2f9dfc74c292ab0973be446997], PUP.Optional.DVDVideoSoftTB, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{872B5B88-9DB5-4310-BDD0-AC189557E5F5}, ˆ[+‡µ C½Ð¬ •Wåõ, , [370e0d2f9dfc74c292ab0973be446997] PUP.Optional.DVDVideoSoftTB, HKU\S-1-5-21-2557430510-3623771520-2665204530-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER|{872B5B88-9DB5-4310-BDD0-AC189557E5F5}, ˆ[+‡µ C½Ð¬ •Wåõ, , [370e0d2f9dfc74c292ab0973be446997] PUP.Optional.DVDVideoSoftTB, HKU\S-1-5-21-2557430510-3623771520-2665204530-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\TOOLBAR\WEBBROWSER\{872B5B88-9DB5-4310-BDD0-AC189557E5F5}, , [79cce25a8e0b8caa92ab720a55ad57a9], PUP.Optional.SearchResults, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}|URL, hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=414&sr=0&q={searchTerms}, , [77ce44f8356486b08236a43a699aa25e] PUP.Optional.SearchQu, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}|SuggestionsURL_JSON, hxxp://www.searchqu.com/suggest.php?src=ieb&appid=0&systemid=414&qu={searchTerms}&ft=json, , [4afb96a6029784b23d788856857ea15f] PUP.Optional.Bandoo.AppFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\LOW RIGHTS\ELEVATIONPOLICY\{CBCB7D2F-3CB5-48A9-87BA-E549F352333A}|AppPath, C:\PROGRA~2\WIA6EB~1\Datamngr\ToolBar, , [ee57320ae5b4db5b326a65c6d52ff40c] PUP.Optional.SearchResults, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}|URL, hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=414&sr=0&q={searchTerms}, , [99acc17b5a3fd2645d5b3da1a1628a76] PUP.Optional.SearchQu, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}|SuggestionsURL_JSON, hxxp://www.searchqu.com/suggest.php?src=ieb&appid=0&systemid=414&qu={searchTerms}&ft=json, , [50f5d16b9405c37306afac32b3503dc3] PUP.Optional.Conduit, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}|URL, hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050, , [ab9a1e1eb1e895a136facfe908fbf10f] PUP.Optional.Iminent, HKLM\SOFTWARE\WOW6432NODE\MOZILLA\FIREFOX\EXTENSIONS|webbooster@iminent.com, C:\Program Files (x86)\Iminent\webbooster@iminent.com, , [79cc300ce4b5d95d1b1e08c120e320e0] PUP.Optional.Spigot, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0A55001B-3E7B-4516-9318-C6BBFDC4C909}|URL, hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=386496&p={searchTerms}, , [ed580f2defaa8fa70a503aa9de25d729] PUP.Optional.Spigot, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0A55001B-3E7B-4516-9318-C6BBFDC4C909}|OSDFileURL, file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml, , [b590b8849efb92a42d2e2bb841c2c13f] PUP.Optional.SearchResults, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}|URL, hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=414&sr=0&q={searchTerms}, , [ac99df5d25744fe75a5de2fc5ca734cc] PUP.Optional.SearchQu, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}|SuggestionsURL_JSON, hxxp://www.searchqu.com/suggest.php?src=ieb&appid=0&systemid=414&qu={searchTerms}&ft=json, , [00451b21c4d5be78634f439bea19b64a] PUP.Optional.Conduit, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}|URL, hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050, , [ac99db6190093ef844dfbcfc63a024dc] PUP.Optional.Spigot, HKU\S-1-5-21-2557430510-3623771520-2665204530-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0A55001B-3E7B-4516-9318-C6BBFDC4C909}|URL, hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=386496&p={searchTerms}, , [91b41b218b0e95a10159c81b3fc4f50b] PUP.Optional.Spigot, HKU\S-1-5-21-2557430510-3623771520-2665204530-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{0A55001B-3E7B-4516-9318-C6BBFDC4C909}|OSDFileURL, file:///C:/Program%20Files%20(x86)/Common%20Files/Spigot/Search%20Settings/yahoo_ie.xml, , [3c09013ba6f3c571f46714cf996aae52] PUP.Optional.SearchResults, HKU\S-1-5-21-2557430510-3623771520-2665204530-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}|URL, hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=414&sr=0&q={searchTerms}, , [11345be13168ae884d6a5f7fd72c54ac] PUP.Optional.SearchQu, HKU\S-1-5-21-2557430510-3623771520-2665204530-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}|SuggestionsURL_JSON, hxxp://www.searchqu.com/suggest.php?src=ieb&appid=0&systemid=414&qu={searchTerms}&ft=json, , [e65fa5974f4ac4729f135b8312f14ab6] PUP.Optional.Conduit, HKU\S-1-5-21-2557430510-3623771520-2665204530-501\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}|URL, hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050, , [4afb023a4b4e94a2cb582f89a06317e9] Registrierungsdaten: 1 PUP.Optional.SearchQu, HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\MAIN|Start Page, hxxp://www.searchqu.com/414, Gut: (www.google.com), Schlecht: (hxxp://www.searchqu.com/414),,[fb4ac17b554484b2c91e8537b64e718f] Ordner: 52 PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Feeds, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\LanguagePacks, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Log, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Program Files (x86)\Conduit\Community Alerts, , [0342b587732687af112bd2e6dc27c43c], PUP.Optional.ConduitTB.Gen, C:\Program Files (x86)\Conduit, , [0342b587732687af112bd2e6dc27c43c], PUP.Optional.OpenCandy, C:\Users\C660\AppData\Roaming\OpenCandy, , [054089b352477eb8ddc92b6e986acf31], PUP.Optional.OpenCandy, C:\Users\C660\AppData\Roaming\OpenCandy\AD97A03E05A94DD39C32066BA380B936, , [054089b352477eb8ddc92b6e986acf31], PUP.Optional.OpenCandy, C:\Users\C660\AppData\Roaming\OpenCandy\OpenCandy_AD97A03E05A94DD39C32066BA380B936, , [054089b352477eb8ddc92b6e986acf31], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\Images, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\cachedIcons, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.SearchQu, C:\Users\C660\AppData\LocalLow\searchquband, , [9baaa696a0f952e4a0edbf03e022a55b], PUP.Optional.DataMngr.AppFlsh, C:\Users\C660\AppData\LocalLow\DataMngr, , [a0a5db61d6c352e447e617b9c2407a86], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\apps, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\radio, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\radio\Skins, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\weather, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\AddedAppDialog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\DefualtImages, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\DetectedAppDialog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\EngineFirstTimeDialog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\NewSearchProtectorDialog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\NewSearchProtectorDialog\images, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorBubbleDialog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorBubbleDialog\images, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorDialog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorDialog\Images, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\images, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarUntrustedAppsApprovalDialog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\UninstallDialog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\UntrustedAddedAppDialog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\UntrustedAppApprovalDialog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\UntrustedAppPendingDialog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\emailnotifier, , [72d32d0f84157fb7f0b4458cca389769], Dateien: 265 PUP.Optional.SmartBar, C:\Users\C660\AppData\Roaming\OpenCandy\AD97A03E05A94DD39C32066BA380B936\LinkuryInstaller.msi, , [70d5f448643579bd86ca59b6da2601ff], Trojan.Agent.FSA, C:\Windows\SysWOW64\GameMon.des, , [6cd9ed4ffb9e0c2a8ee9053d48b9b54b], PUP.Optional.ChipDigital, C:\Users\C660\Downloads\OpenOffice - CHIP-Installer.exe, , [1c292517ddbc2115ba7aa20a5ea6aa56], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\DynamicDialogs.zip, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\DialogsAPI.js, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\PIE.htc, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\settings.js, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\version.txt, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\AppNotification.js, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\initialNotification.html, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\main.html, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\NotificationDialogStyle.css, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\NotificationDialogStyleIE9.css, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\sampleNotification.html, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\close.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\like.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Next.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Next_hover.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\powered-by.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Prev.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Prev_hover.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\settings.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\Thumbs.db, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\close.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Next.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Next_hover.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\powered-by.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Prev.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\Prev_hover.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\dark\settings.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\close.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Next.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Next_hover.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\powered-by.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Prev.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Prev_hover.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\settings.png, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Dialogs\AppNotificationDialog\Images\light\Thumbs.db, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_666138_661999_DE.xml, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\Feeds\http___alerts_conduit-services_com_root_909619_905414_DE.xml, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\LanguagePacks\en.xml, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\LocalLow\Conduit\Community Alerts\LanguagePacks\en????????.xml, , [eb5a60dcc6d3dc5afd2abd1d847e6a96], PUP.Optional.ConduitTB.Gen, C:\Program Files (x86)\Conduit\Community Alerts\Alert.dll, , [0342b587732687af112bd2e6dc27c43c], PUP.Optional.ConduitTB.Gen, C:\Program Files (x86)\Conduit\Community Alerts\Alert0.dll, , [0342b587732687af112bd2e6dc27c43c], PUP.Optional.OpenCandy, C:\Users\C660\AppData\Roaming\OpenCandy\AD97A03E05A94DD39C32066BA380B936\2533.ico, , [054089b352477eb8ddc92b6e986acf31], PUP.Optional.OpenCandy, C:\Users\C660\AppData\Roaming\OpenCandy\AD97A03E05A94DD39C32066BA380B936\EBB77268-338F-4C6A-8590-AD88FED26F4A, , [054089b352477eb8ddc92b6e986acf31], PUP.Optional.OpenCandy, C:\Users\C660\AppData\Roaming\OpenCandy\AD97A03E05A94DD39C32066BA380B936\OCBrowserHelper_1.0.3.81.dll, , [054089b352477eb8ddc92b6e986acf31], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\notificationDB.sqlite, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\servicesMap.json, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\DialogsAPI.js, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\PIE.htc, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\settings.js, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\version.txt, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\AppNotification.js, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\initialNotification.html, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\main.html, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\NotificationDialogStyle.css, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\NotificationDialogStyleIE9.css, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\sampleNotification.html, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\Images\close.png, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\Images\like.png, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\Images\Next.png, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\Images\Next_hover.png, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\Images\powered-by.png, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\Images\Prev.png, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\Images\Prev_hover.png, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\Images\settings.png, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\alert\Dialogs\AppNotificationDialog\Images\Thumbs.db, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\cachedIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_equalizer_dead.gif, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\cachedIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_minimize.gif, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\cachedIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_play.gif, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\cachedIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_stop.gif, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\cachedIcons\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_vol.gif, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\Chat.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\DataStructures.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\EBEncryption.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\ExternalLibraryLoader.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\HTTP.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\IO.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\Log.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\MainSingleton.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\MD5.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\Notifications.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\ObserversAndEvents.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\Prefs.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\SearchProtector.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\SearchSuggestIO.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\String.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\TEAEncryption.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\Timer.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\Twitter.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\URL.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\Windows.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\conduitCommon\modules\3.6.0.10\XML.jsm, , [0c39be7ecfca9e986a21d4cd59a9e51b], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\1.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\2229.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\a.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\b.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\c.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\d.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\e.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\f.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\g.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\h.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\i.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\j.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\k.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\l.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\m.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\n.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\o.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\p.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\q.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\r.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\s.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\t.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\u.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\v.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\w.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\wlu.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\x.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\y.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.PriceGong, C:\Users\C660\AppData\LocalLow\PriceGong\Data\z.txt, , [0441310ba1f84ee8e898fdc2d72b3ac6], PUP.Optional.DataMngr.AppFlsh, C:\Users\C660\AppData\LocalLow\DataMngr\{7CA1F051-A4FB-4143-B263-02B41E571EED}, , [a0a5db61d6c352e447e617b9c2407a86], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\appsMetaData.json, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.1000034.Settings, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.1000082.currentList, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.1000082.localStations, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.1000082.nowPlaying, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.1000082.publisherStations, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.128834881989343895.search.selectedEngineId, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.128834881989343895.search.settings, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.AlertService, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\searchInNewTabData.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\ServiceMap.json, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\ThirdPartyComponents.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarContextMenu.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbar_initializing_logger.txt, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\uninstallData, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\uninstallUrl, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\unsharedAppsContextMenu.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\UserAdditionalComponents.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.20.14.serviceLayer_services_translation, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.27.6.serviceLayer_services_appsMetadata, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.27.6.serviceLayer_services_appTrackingFirstTime, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.27.6.serviceLayer_services_gottenAppsContextMenu, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.27.6.serviceLayer_services_login, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.27.6.serviceLayer_services_optimizer, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.27.6.serviceLayer_services_otherAppsContextMenu, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.27.6.serviceLayer_services_searchAPI, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.27.6.serviceLayer_services_serviceMap, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.27.6.serviceLayer_services_toolbarContextMenu, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.27.6.serviceLayer_services_toolbarSettings, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.27.6.serviceLayer_services_translation, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.AlertsInfoData, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.20.14.serviceLayer_services_toolbarSettings, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_RAW.serviceLayer_services_appsMetadata, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_RAW.serviceLayer_services_appTrackingFirstTime, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_RAW.serviceLayer_services_gottenAppsContextMenu, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_RAW.serviceLayer_services_login, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_RAW.serviceLayer_services_optimizer, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_RAW.serviceLayer_services_otherAppsContextMenu, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_RAW.serviceLayer_services_searchAPI, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_RAW.serviceLayer_services_serviceMap, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_RAW.serviceLayer_services_toolbarContextMenu, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_RAW.serviceLayer_services_toolbarSettings, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_RAW.serviceLayer_services_translation, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\getAppsContextMenu.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\languagePack.json, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\LocalSettings.txt, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\postAppsContextMenu.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.appOptions, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.cookiesRepo, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.NotificationSettings, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.NOTIFICATION_ID.alert_login_service, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.NOTIFICATION_ID.notifications_serviceMap, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.pg_conf_global, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.savedPositions, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.searchProtectorData, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050.skin, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.2.10.serviceLayer_services_clientErrorLog, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.2.10.serviceLayer_services_serviceMap, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.20.14.serviceLayer_services_login, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\CT2269050_10.10.20.14.serviceLayer_services_serviceMap, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\apps\list.json, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\radio\IP_Media_List.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\radio\Predefined_Media_List.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\radio\Recent_Media_List.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\radio\User_Media_List.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\radio\Skins\http___storage_conduit_com_BankImages_RadioSkins_Bluenote_display_xml.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_50_226_CT2269050_Images_634382054836300000.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_50_226_CT2269050_Images_634067677527028750.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_50_226_CT2269050_Images_634084057716610000.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_50_226_CT2269050_Images_634084059408641250.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_50_226_CT2269050_Images_634084059786610000.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_50_226_CT2269050_Images_634084060404266250.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_50_226_CT2269050_Images_634262976368243750.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_50_226_CT2269050_Images_634265435748037500.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_50_226_ct2269050_Images_634775124572492500.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_images_ClientImages_radio.gif, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_images_searchengines_search_icon.gif, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_MarketPlace_81_28e_816147d9-d2b0-4dc7-b220-fb7ea1b1228e_Appearance_634726106907093173.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\toolbarImages\http___storage_conduit_com_MarketPlace_d2_909_d2d47f0a-2c1d-48a1-8dba-fdebac043909_Appearance_634726116365249321.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\weather\forecast_en.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\weather\history.xml, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\DialogsAPI.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\excanvas.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\generalDialogStyle.css, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\PIE.htc, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\RoundedCorners.css, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\RoundedCornersIE9.css, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\settings.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\version.txt, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\AddedAppDialog\app-added.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\AddedAppDialog\main.html, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\DefualtImages\icon.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\DetectedAppDialog\app-2go.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\DetectedAppDialog\main.html, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\EngineFirstTimeDialog\EngineFirstTimeDialog.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\EngineFirstTimeDialog\main.html, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\EngineFirstTimeDialog\right-click.gif, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\NewSearchProtectorDialog\main.html, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\NewSearchProtectorDialog\SearchProtector.css, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\NewSearchProtectorDialog\SearchProtector.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\NewSearchProtectorDialog\images\ok-button.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\NewSearchProtectorDialog\images\separation-line.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\NewSearchProtectorDialog\images\warning.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorBubbleDialog\bubble.css, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorBubbleDialog\bubble.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorBubbleDialog\main.html, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorBubbleDialog\images\information.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorBubbleDialog\images\x-default-LTR.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorBubbleDialog\images\x-default-RTL.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorBubbleDialog\images\x-mouseover-LTR.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorBubbleDialog\images\x-mouseover-RTL.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorDialog\main.html, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorDialog\SearchProtector.css, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorDialog\SearchProtector.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorDialog\Images\info.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorDialog\Images\ok-on.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\SearchProtectorDialog\Images\ok.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\main.html, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\ToolbarFirstTimeDialog.css, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\ToolbarFirstTimeDialog.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\images\app-store-icon.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\images\arrow.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\images\divider.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\images\emailNotifier.gif, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\images\facebook.png, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\images\radio.GIF, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\images\Thumbs.db, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\images\truste_welcome.GIF, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarFirstTimeDialog\images\weather.GIF, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarUntrustedAppsApprovalDialog\main.html, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\ToolbarUntrustedAppsApprovalDialog\ToolbarUntrustedAppsApprovalDialog.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\UntrustedAddedAppDialog\main.html, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\UntrustedAddedAppDialog\UT-app-dialog-added.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\UntrustedAppApprovalDialog\main.html, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\UntrustedAppApprovalDialog\UT-app-dialog-needs-your-approval.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\UntrustedAppPendingDialog\main.html, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\Dialogs\UntrustedAppPendingDialog\UT-app-dialog-is-waiting.js, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.ConduitTB.Gen, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\CT2269050\emailnotifier\acc, , [72d32d0f84157fb7f0b4458cca389769], PUP.Optional.Conduit, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js, Gut: (), Schlecht: (user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}");), ,[1e2794a84d4c77bfd53260822dd77888] PUP.Optional.Conduit, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js, Gut: (), Schlecht: (user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=2&q=");), ,[2b1a3309742585b158b1954d27dd14ec] PUP.Optional.Conduit, C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js, Gut: (), Schlecht: (user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=2&q=");), ,[88bdbb81019880b656b55989c63e45bb] Physische Sektoren: 0 (keine bösartigen Elemente erkannt) (end) |
|
21.01.2016, 12:53
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA Voll mit Junk  Scan mit Farbar's Recovery Scan Tool (FRST) Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop:  FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ Logfiles bitte immer in CODE-Tags posten |
|
21.01.2016, 13:16
| #5 |
| | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA FRST: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:18-01-2016
durchgeführt von C660 (Administrator) auf C660-SATELLITE (21-01-2016 13:11:33)
Gestartet von C:\Users\C660\Downloads
Geladene Profile: C660 (Verfügbare Profile: C660 & Mcx1-C660-SATELLITE & Gast & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(TOSHIBA CORPORATION) C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSENotify.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet 6600\Bin\HPNetworkCommunicator.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.10586.0_none_95e4f9a171a1ad95\TiWorker.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944648 2015-06-12] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2010-12-14] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [566696 2011-03-02] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [973176 2010-12-15] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710040 2010-12-08] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-03-28] (Toshiba Europe GmbH)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM-x32\...\Run: [SVPWUTIL] => C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe [532480 2010-11-09] (TOSHIBA)
HKLM-x32\...\Run: [HWSetup] => C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [423936 2010-03-04] (TOSHIBA Electronics, Inc.)
HKLM-x32\...\Run: [KeNotify] => C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2010-08-16] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-11] (TOSHIBA Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2016-01-20] (AVAST Software)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\Run: [HP Officejet 6600 (NET)] => C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe [2676584 2011-09-09] (Hewlett-Packard Co.)
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [232960 2015-10-30] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-01-20] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-01-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-01-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-01-20] (Microsoft Corporation)
Startup: C:\Users\C660\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2016-01-20]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
Startup: C:\Users\C660\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - .lnk [2015-12-18]
ShortcutTarget: Tintenwarnungen überwachen - .lnk -> C:\Program Files\HP\HP Officejet 6600\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-03-28]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-03-28]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-03-28]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Mcx1-C660-SATELLITE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-03-28]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{e410272a-f70d-41b1-9afb-1b5dfae95159}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://cloud-search.linkury.com/results.htm?cx=partner-pub-7890126930977991:1926905636&cof=FORID:11&q={searchTerms}&sa=Search&siteurl=search.linkury.com
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.searchqu.com/414
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba.msn.com
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://cloud-search.linkury.com/results.htm?cx=partner-pub-7890126930977991:1926905636&cof=FORID:11&q={searchTerms}&sa=Search&siteurl=search.linkury.com
SearchScopes: HKLM -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=414&sr=0&q={searchTerms}
SearchScopes: HKLM -> {64D54645-841C-497C-ABA0-72BCEEDDCE39} URL = hxxp://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=414&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=414&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=414&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKLM-x32 -> {B95DCC18-23E7-4523-BB3D-183DBC08B8A9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> DefaultScope {0A55001B-3E7B-4516-9318-C6BBFDC4C909} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=386496&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> {0A55001B-3E7B-4516-9318-C6BBFDC4C909} URL = hxxp://de.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=386496&p={searchTerms}
SearchScopes: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> {5383B699-FB4F-4C57-8EA6-7506B8BF2C0A} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibade-win7-ie-search-21&index=blended&linkCode=ur2
SearchScopes: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> {6D9AEAB1-5455-4F4A-B9BC-D60DD6C738AF} URL = hxxp://rover.ebay.com/rover/1/707-44556-9400-9/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> {94892747-3484-4BF3-A6C2-B50ED9B0D015} URL = hxxp://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2414} URL = hxxp://dts.search-results.com/sr?src=ieb&appid=0&systemid=414&sr=0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> {AFDBDDAA-5D3F-42EE-B79C-185A7020515B} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT2269050
SearchScopes: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> {B95DCC18-23E7-4523-BB3D-183DBC08B8A9} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-12-15] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-05-09] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-01-20] (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-01-20] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-05-09] (Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-12-15] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-03] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-01-20] (AVAST Software)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Kein Name -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> Keine Datei
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-01-20] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-03] (Oracle Corporation)
BHO-x32: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2010-12-05] (<TOSHIBA>)
Toolbar: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> Kein Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - Keine Datei
Toolbar: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> Kein Name - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - Keine Datei
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default
FF DefaultSearchUrl: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}
FF SearchEngineOrder.1: Search Results
FF SelectedSearchEngine:
FF Homepage: hxxp://www.google.de/
FF Keyword.URL: hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=2&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-20] ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-05-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-05-09] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @gamersfirst.com/LiveLauncher -> C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll [Keine Datei]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIIPT.dll [2013-01-11] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll [2013-01-11] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-03] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-03] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-03] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-12-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2557430510-3623771520-2665204530-1000: @phonostar.de/phonostar -> C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-2557430510-3623771520-2665204530-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-05-31] ()
FF user.js: detected! => C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\user.js [2011-07-14]
FF Extension: Print selected text - C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\extensions\pst@i1024a.pl.xpi [2015-04-26]
FF Extension: Adblock Plus - C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-20]
FF HKLM-x32\...\Firefox\Extensions: [webbooster@iminent.com] - C:\Program Files (x86)\Iminent\webbooster@iminent.com => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [{ACAA314B-EEBA-48e4-AD47-84E31C44796C}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-01-20]
FF HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff => nicht gefunden
Chrome:
=======
CHR StartupUrls: Default -> "hxxps://de-de.facebook.com/"
CHR Profile: C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-08]
CHR Extension: (Google Docs) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-08]
CHR Extension: (Google Drive) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-27]
CHR Extension: (YouTube) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-07]
CHR Extension: (Google-Suche) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30]
CHR Extension: (Google Tabellen) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-08]
CHR Extension: (Avira Browserschutz) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-01-20]
CHR Extension: (Google Docs Offline) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-16]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-12]
CHR Extension: (Adblock Plus) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\peielepacdigfhimglfncbljnbnibooi [2015-02-01]
CHR Extension: (Google Mail) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-20]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-01-20]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2016-01-20] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2787512 2015-12-22] (Microsoft Corporation)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-08-04] (Nero AG)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [1809920 2010-08-04] (Realsil Microelectronics Inc.) [Datei ist nicht signiert]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Datei ist nicht signiert]
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2078216 2015-10-21] (Electronic Arts)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Datei ist nicht signiert]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-06-12] (Synaptics Incorporated)
R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2014-09-29] (Intel(R) Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2016-01-20] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2016-01-20] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2016-01-20] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2016-01-20] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065208 2016-01-20] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [464256 2016-01-20] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2016-01-20] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2016-01-20] (AVAST Software)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] () [Datei ist nicht signiert]
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-06-17] (Intel Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek )
R3 rtwlane_13; C:\Windows\System32\drivers\rtwlane_13.sys [3749888 2015-10-30] (Realtek Semiconductor Corporation )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-12] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [54424 2015-08-10] (Toshiba Corporation)
S3 TIEHDUSB; C:\Windows\System32\drivers\tiehdusb.sys [128512 2012-03-07] (Texas Instruments) [Datei ist nicht signiert]
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-01-21 13:11 - 2016-01-21 13:12 - 00028240 _____ C:\Users\C660\Downloads\FRST.txt
2016-01-21 13:11 - 2016-01-21 13:11 - 00000000 ____D C:\FRST
2016-01-21 13:10 - 2016-01-21 13:10 - 02370560 _____ (Farbar) C:\Users\C660\Downloads\FRST64.exe
2016-01-21 11:27 - 2016-01-21 11:28 - 00000000 ____D C:\Users\C660\Documents\Malwarebytes
2016-01-21 11:03 - 2016-01-21 11:03 - 00068039 _____ C:\Malwarebytes 1. Scan 21.01.16.txt
2016-01-20 21:46 - 2016-01-20 21:47 - 06805440 _____ (Piriform Ltd) C:\Users\C660\Downloads\ccsetup_513.exe
2016-01-20 21:40 - 2016-01-21 10:19 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-01-20 21:39 - 2016-01-20 21:39 - 00001182 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-01-20 21:39 - 2016-01-20 21:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-01-20 21:39 - 2016-01-20 21:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-01-20 21:39 - 2016-01-20 21:39 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2016-01-20 21:39 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-01-20 21:39 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-01-20 21:39 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-01-20 21:35 - 2016-01-20 21:35 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-01-20 21:35 - 2016-01-20 21:35 - 00002131 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-01-20 21:33 - 2016-01-20 21:33 - 01466656 _____ C:\Users\C660\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
2016-01-20 21:11 - 2016-01-20 21:11 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 ____D C:\Users\DefaultAppPool
2016-01-20 21:11 - 2015-12-04 19:05 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Media Center Programs
2016-01-20 21:11 - 2015-12-04 19:05 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Macromedia
2016-01-20 21:11 - 2015-12-04 19:05 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Local\Microsoft Help
2016-01-20 21:10 - 2016-01-20 21:24 - 01065208 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2016-01-20 21:10 - 2016-01-20 21:24 - 00464256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2016-01-20 21:10 - 2016-01-20 21:24 - 00097648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2016-01-20 21:10 - 2016-01-20 21:10 - 00386096 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-01-20 21:10 - 2016-01-20 21:10 - 00273784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2016-01-20 21:10 - 2016-01-20 21:10 - 00155304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2016-01-20 21:10 - 2016-01-20 21:10 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2016-01-20 21:10 - 2016-01-20 21:10 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-01-20 21:10 - 2016-01-20 21:10 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-01-20 21:10 - 2016-01-20 21:10 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-01-20 21:10 - 2016-01-20 21:10 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-01-20 21:10 - 2016-01-20 21:10 - 00001986 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2016-01-20 21:10 - 2016-01-20 21:10 - 00001974 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-01-20 21:10 - 2016-01-20 21:10 - 00000000 ____D C:\Users\C660\AppData\Roaming\AVAST Software
2016-01-20 21:09 - 2016-01-20 21:09 - 00000000 ____D C:\ProgramData\AVAST Software
2016-01-20 21:09 - 2016-01-20 21:09 - 00000000 ____D C:\Program Files\AVAST Software
2016-01-20 21:01 - 2016-01-20 21:09 - 161199128 _____ (AVAST Software) C:\Users\C660\Downloads\avast_free_antivirus_setup.exe
2016-01-20 20:27 - 2016-01-21 11:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-17 18:17 - 2016-01-17 18:17 - 00000000 ____D C:\Program Files\DIFX
2016-01-17 18:17 - 2012-03-07 10:07 - 00128512 _____ (Texas Instruments) C:\WINDOWS\system32\Drivers\tiehdusb.sys
2016-01-17 18:17 - 2012-02-17 14:01 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71.dll
2016-01-17 18:17 - 2012-02-17 14:01 - 01047552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71u.dll
2016-01-17 18:17 - 2012-02-17 14:01 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2016-01-17 18:17 - 2012-02-17 14:01 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2016-01-17 18:17 - 2012-02-17 14:01 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl71.dll
2016-01-14 19:51 - 2016-01-14 19:52 - 01466656 _____ C:\Users\C660\Downloads\WAV To MP3 - CHIP-Installer.exe
2016-01-14 15:47 - 2016-01-05 03:51 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-01-14 15:47 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-01-14 15:47 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-01-14 15:47 - 2016-01-05 03:50 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-01-14 15:47 - 2016-01-05 03:50 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-01-14 15:47 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-01-14 15:47 - 2016-01-05 03:49 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-01-14 15:47 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-01-14 15:47 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-01-14 15:47 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-01-14 15:47 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-01-14 15:47 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-01-14 15:47 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-01-14 15:47 - 2016-01-05 03:33 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-01-14 15:47 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-01-14 15:47 - 2016-01-05 03:33 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-01-14 15:47 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2016-01-14 15:47 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-01-14 15:47 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-01-14 15:47 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-01-14 15:47 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-01-14 15:47 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-14 15:47 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-01-14 15:47 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-01-14 15:47 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-14 15:47 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-01-14 15:47 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-01-14 15:47 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-01-14 15:47 - 2016-01-05 02:59 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-01-14 15:47 - 2016-01-05 02:57 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-14 15:47 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-01-14 15:47 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-01-14 15:47 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-01-14 15:47 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-01-14 15:47 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2016-01-14 15:47 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-01-14 15:47 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-01-14 15:47 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-14 15:47 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-01-14 15:47 - 2016-01-05 02:50 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-01-14 15:47 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-01-14 15:47 - 2016-01-05 02:49 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-01-14 15:47 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-01-14 15:47 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-14 15:47 - 2016-01-05 02:49 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-01-14 15:47 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-01-14 15:47 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2016-01-14 15:47 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-14 15:47 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-01-14 15:47 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-01-14 15:47 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-01-14 15:47 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-01-14 15:47 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-01-14 15:47 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-01-14 15:47 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-01-14 15:47 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2016-01-14 15:47 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-01-14 15:47 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-01-14 15:47 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-01-14 15:47 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-01-14 15:47 - 2016-01-05 02:41 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-01-14 15:47 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-01-14 15:47 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-01-14 15:47 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-01-14 15:47 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll
2016-01-14 15:47 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-01-14 15:47 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-01-14 15:47 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-01-14 15:47 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-01-14 15:47 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-01-14 15:47 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-01-14 15:47 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-01-14 15:47 - 2016-01-05 02:33 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-01-14 15:47 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-01-14 15:47 - 2016-01-05 02:30 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-01-14 15:47 - 2016-01-05 02:29 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-01-14 15:47 - 2016-01-05 02:28 - 07826432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-01-14 15:47 - 2016-01-05 02:28 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-01-14 15:47 - 2016-01-05 02:28 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-01-14 15:47 - 2016-01-05 02:25 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-01-11 14:21 - 2016-01-20 22:23 - 00000000 ____D C:\Users\C660\Documents\Seminarfach
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-01-21 13:11 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2016-01-21 13:00 - 2015-02-01 15:30 - 00001148 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-21 12:48 - 2013-05-28 20:28 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-01-21 08:41 - 2015-12-04 18:51 - 02113470 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-21 08:41 - 2015-10-30 19:35 - 00899256 _____ C:\WINDOWS\system32\perfh007.dat
2016-01-21 08:41 - 2015-10-30 19:35 - 00201706 _____ C:\WINDOWS\system32\perfc007.dat
2016-01-21 08:41 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-01-20 22:43 - 2015-02-01 15:30 - 00001144 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-20 22:42 - 2014-10-19 11:19 - 00000000 ____D C:\Users\C660\AppData\Local\HTC MediaHub
2016-01-20 22:40 - 2015-12-04 19:16 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-20 22:40 - 2015-12-04 18:43 - 00364992 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-20 22:39 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-01-20 22:38 - 2011-06-01 11:47 - 00000000 ____D C:\Program Files (x86)\Intel
2016-01-20 22:25 - 2015-12-21 21:23 - 00000000 ____D C:\Users\C660\Documents\Leistungsdiagnostik
2016-01-20 22:25 - 2012-12-30 12:01 - 00000000 ____D C:\Users\C660\Documents\Word sachen
2016-01-20 22:22 - 2013-08-14 18:30 - 00000000 ____D C:\Users\C660\Documents\Pdf Sachen
2016-01-20 22:18 - 2014-04-27 13:19 - 00002350 _____ C:\WINDOWS\System32\Tasks\{4C840634-7379-420B-BB1E-D6A0B1F7DF85}
2016-01-20 22:18 - 2013-12-27 13:22 - 00002528 _____ C:\WINDOWS\System32\Tasks\{27477227-33A9-43D1-9CDE-F7666EAEC1AE}
2016-01-20 21:58 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-01-20 21:57 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-01-20 21:57 - 2015-08-10 21:42 - 00000000 ____D C:\Users\C660\AppData\Local\Packages
2016-01-20 21:51 - 2013-10-08 12:56 - 00000000 ____D C:\WINDOWS\uninstall
2016-01-20 21:50 - 2014-08-18 15:58 - 00000000 ____D C:\Users\C660\AppData\Local\Adobe
2016-01-20 21:47 - 2015-12-07 11:15 - 00000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-01-20 21:35 - 2014-12-28 18:21 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-01-20 21:34 - 2011-03-28 16:15 - 00000000 ____D C:\ProgramData\Adobe
2016-01-20 21:34 - 2011-03-28 16:15 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-01-20 21:07 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-01-20 21:04 - 2013-02-22 20:18 - 00000000 ____D C:\Program Files (x86)\Avira
2016-01-20 21:04 - 2012-10-06 11:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-20 21:03 - 2015-12-04 18:52 - 00000000 ____D C:\Users\C660
2016-01-20 21:03 - 2014-08-14 12:02 - 00000000 ____D C:\ProgramData\Package Cache
2016-01-20 21:03 - 2011-12-02 18:07 - 00000000 ____D C:\ProgramData\Avira
2016-01-20 21:01 - 2013-12-12 17:26 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-01-20 20:22 - 2012-05-18 17:51 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-01-20 20:22 - 2012-05-18 17:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-01-20 20:20 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-01-20 20:20 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-01-20 20:20 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-01-20 20:20 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-01-19 17:35 - 2015-02-03 14:08 - 00000000 ____D C:\Users\C660\AppData\Roaming\.minecraft
2016-01-15 20:59 - 2013-08-14 18:40 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-01-15 18:06 - 2011-07-23 12:31 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-01-15 18:01 - 2015-08-10 21:32 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-01-14 19:54 - 2013-10-08 13:28 - 00000000 ____D C:\WAV To MP3
2016-01-14 19:54 - 2013-10-08 13:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WAV To MP3
2016-01-14 16:19 - 2012-05-18 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-01-14 16:18 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-01-11 14:51 - 2011-07-23 11:37 - 00000000 ____D C:\Users\C660\AppData\Local\Microsoft Help
2016-01-05 21:49 - 2015-12-04 18:38 - 00000000 ____D C:\Windows.old
2016-01-03 02:40 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-01-03 02:40 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-02 13:06 - 2014-11-14 20:17 - 00000000 ____D C:\Users\C660\Desktop\Spiele
2015-12-30 11:53 - 2015-12-04 18:42 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-22 16:39 - 2014-04-23 17:52 - 00000000 ____D C:\Users\C660\Documents\Nachhilfe
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2013-01-11 15:13 - 2013-01-11 15:13 - 0022464 _____ (Intel Corporation) C:\Users\C660\AppData\Roaming\JomCap.dll
2013-01-05 18:30 - 2013-01-05 18:30 - 0000092 _____ () C:\Users\C660\AppData\Local\fusioncache.dat
2012-10-12 15:03 - 2015-04-03 22:48 - 0007601 _____ () C:\Users\C660\AppData\Local\resmon.resmoncfg
2013-08-09 16:39 - 2013-08-09 16:39 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-12-04 18:48 - 2015-12-04 18:48 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2011-07-08 11:34 - 2011-07-08 11:34 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2012-06-29 22:23 - 2012-06-29 22:23 - 0001534 _____ () C:\ProgramData\ss.ini
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-01-20 22:53
==================== Ende von FRST.txt ============================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:18-01-2016
durchgeführt von C660 (2016-01-21 13:12:30)
Gestartet von C:\Users\C660\Downloads
Windows 10 Home (X64) (2015-12-04 18:21:49)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2557430510-3623771520-2665204530-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2557430510-3623771520-2665204530-1002 - Limited - Enabled)
C660 (S-1-5-21-2557430510-3623771520-2665204530-1000 - Administrator - Enabled) => C:\Users\C660
DefaultAccount (S-1-5-21-2557430510-3623771520-2665204530-503 - Limited - Disabled)
Gast (S-1-5-21-2557430510-3623771520-2665204530-501 - Limited - Disabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-2557430510-3623771520-2665204530-1004 - Limited - Enabled)
Mcx1-C660-SATELLITE (S-1-5-21-2557430510-3623771520-2665204530-1006 - Limited - Enabled) => C:\Users\Mcx1-C660-SATELLITE
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Out of date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Out of date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Apple Application Support (32-Bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software)
Avira (HKLM-x32\...\{0696cc37-db90-4000-be99-4a173ca7c8af}) (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v9.10.32(T) - TOSHIBA CORPORATION)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.13 - Piriform)
Complément Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
eBay (HKLM-x32\...\{FDE58148-57E7-43BF-879A-29CCE818C078}) (Version: 1.1.9 - eBay Inc.)
Empire: Total War (HKLM-x32\...\Steam App 10500) (Version: - The Creative Assembly)
FIFA 16 DEMO (HKLM-x32\...\{D09AD1AE-6AAC-45EB-B9F6-C1F223DD8481}) (Version: 1.0.0.0 - Electronic Arts)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Grand Theft Auto San Andreas (HKLM-x32\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Officejet 6600 - Grundlegende Software für das Gerät (HKLM\...\{C768E610-4DFB-4A60-A59B-71549EB7BF75}) (Version: 25.0.619.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.13.0.003 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.24.5 - HTC)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
Intel Extreme Tuning Utility (HKLM-x32\...\{ffa8daa3-4912-4a4a-aac4-a0549064268b}) (Version: 5.1.1.25 - Intel Corporation)
Intel Extreme Tuning Utility (x32 Version: 5.1.1.25 - Intel Corporation) Hidden
Intel(R) Identity Protection Technology 1.2.28.0 (HKLM-x32\...\{A87263E8-26CB-1016-8F2F-C04708B17CE2}) (Version: 1.2.28.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.25.1036 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.1.80.1213 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2291 - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\3FD0C489-0F02-481a-A3E1-9754CD396761) (Version: - Intel Corporation)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java 7 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417071FF}) (Version: 7.0.710 - Oracle)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4787.1002 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Mozilla Firefox 43.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 de)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\MyFreeCodec) (Version: - )
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4787.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4787.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4787.1002 - Microsoft Corporation) Hidden
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.38.113.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0013 - REALTEK Semiconductor Corp.)
Samsung Kies (x32 Version: 2.6.3.14044_16 - Samsung Electronics Co., Ltd.) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Spotify (HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\Spotify) (Version: 1.0.12.161.g64b0797c - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.10.0 - Synaptics Incorporated)
TeamSpeak 3 Client (HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
Test Drive Unlimited (HKLM-x32\...\{C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}) (Version: 1.00.0000 - Ihr Firmenname)
TOSHIBA Assist (HKLM-x32\...\{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}) (Version: 4.02.02 - TOSHIBA CORPORATION)
TOSHIBA ConfigFree (HKLM-x32\...\{F52618B2-A995-4F8D-A6C8-9E235A470C68}) (Version: 8.0.36 - TOSHIBA CORPORATION)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.6 for x64 - TOSHIBA Corporation)
TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.8.64 - TOSHIBA Corporation)
TOSHIBA Flash Cards Support Utility (HKLM-x32\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.63.0.12C - TOSHIBA CORPORATION)
TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}) (Version: 1.63.1.34C - TOSHIBA CORPORATION)
TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.7 - TOSHIBA Corporation)
Toshiba Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.02 - TOSHIBA)
TOSHIBA Media Controller (HKLM-x32\...\{C7A4F26F-F9B0-41B2-8659-99181108CDE3}) (Version: 1.0.86.2 - TOSHIBA CORPORATION)
TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.6.1 - TOSHIBA CORPORATION)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.3.10010 - TOSHIBA CORPORATION)
TOSHIBA Recovery Media Creator Reminder (HKLM-x32\...\InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}) (Version: 1.00.0019 - TOSHIBA)
TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}) (Version: 1.7.17.64 - TOSHIBA Corporation)
TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.1.0 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.2.14 - TOSHIBA)
TOSHIBA Supervisor Password (HKLM-x32\...\InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}) (Version: 1.63.51.2C - TOSHIBA CORPORATION)
TOSHIBA TEMPRO (HKLM-x32\...\{F082CB11-4794-4259-99A1-D91BA762AD15}) (Version: 3.35 - Toshiba Europe GmbH)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.5.4.64 - TOSHIBA Corporation)
TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.0.19 - TOSHIBA Corporation)
TOSHIBA Wireless LAN Indicator (HKLM-x32\...\{CDADE9BC-612C-42B8-B929-5C6A823E7FF9}) (Version: 1.0.3 - TOSHIBA CORPORATION)
TRORMCLauncher (HKLM-x32\...\InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}) (Version: - )
TRORMCLauncher (Version: 1.0.0.10 - TOSHIBA) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Utility Common Driver (x32 Version: 1.0.52.2C - TOSHIBA) Hidden
VirtualDJ Home FREE (HKLM-x32\...\{A6AC699F-8315-40CA-8F70-E917494978AB}) (Version: 7.4 - Atomix Productions)
WAV To MP3 V2 (HKLM-x32\...\WAV To MP3_is1) (Version: - hxxp://www.WAVMP3.net)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\C660\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0A32B78E-151F-4ACA-8D8D-99ED66997103} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {0BF0E06E-A783-4A83-8B51-06D687F4EA5C} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {11D942D0-0202-4953-B519-421AB4923EC7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-26] (Google Inc.)
Task: {146F46E4-4BA2-4E03-A4D0-811E4F7B68A3} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {1D62E51A-37DA-46B8-BFBE-F0E83BD671BB} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {22F54B01-96C8-4F32-A6DF-B6A975CE905F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-27] (Microsoft Corporation)
Task: {24FC2031-5DAD-4FEB-9E21-A9259DC40C7C} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {2F83C0D5-F59E-4CC1-9554-45AD0F8F0282} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {33065BDC-AE46-45FE-AB19-6C3953EED060} - System32\Tasks\{B446D884-9211-4DA8-A278-4C0D785EF699} => Chrome.exe hxxp://ui.skype.com/ui/0/5.3.0.120.280/en/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;ienotdefaultbrowser2
Task: {383B19C8-D0F0-4A23-9216-B07613A016B6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-26] (Google Inc.)
Task: {3B36A037-EDA0-449D-B70D-28279EE24E44} - System32\Tasks\{27477227-33A9-43D1-9CDE-F7666EAEC1AE} => pcalua.exe -a "B:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\bin\addoninstaller.exe" -d "B:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2" -c /register
Task: {3C1328EE-ED95-4F16-B817-0236AB9FD5E4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-01-15] (Microsoft Corporation)
Task: {3DCB3BEB-F991-4831-9F60-5521D45B8888} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {40462866-339B-4B31-8E2A-1D84BC78F4A0} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {4522C2CF-F499-4F06-82CB-DE0DD3B327FE} - System32\Tasks\{4C840634-7379-420B-BB1E-D6A0B1F7DF85} => pcalua.exe -a C:\Users\C660\Downloads\Filius-Setup-1.5.4.exe -d C:\Users\C660\Downloads
Task: {4962458D-60F9-4993-857E-21D48AC557B7} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {496BFD4E-9399-4D23-A18D-1C8897632724} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {4BA94D1C-91D3-4DBB-9BF7-9996B782E354} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {4D75AF42-16B9-483B-A080-222633CFD4FE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {4E47E2BE-601D-42B9-BB08-188DB66EC23A} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {51593879-EB79-44BD-BFE3-CAB2A9B0D6FF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-12-08] (Piriform Ltd)
Task: {537BA02C-20AC-424C-87DC-06BB62F50D61} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {566611E0-052B-4052-AE23-FD6B606FF603} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {57F498C4-20E2-4586-9681-4457D0EBA6F2} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {65A02571-1991-454D-9B25-50999BEAB3CD} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {66CC7C44-36CE-4FAC-9366-7FAC881AABA0} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {694C1AC8-D55F-4A68-9C6D-F2B6B302C639} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {69C802F3-94C5-47D0-B947-FA80EC4070DD} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {6E7EC7AD-F90A-4915-A506-154DBE63347C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {6F1E87F7-5FEF-4BFD-B9D8-3443326DF209} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-27] (Microsoft Corporation)
Task: {73E9C22C-7C8F-48A9-B172-877C4D3EC8D4} - System32\Tasks\{79B7F7BD-EF24-49EC-9FD8-1009C76B2ECB} => C:\Program Files (x86)\Rockstar Games\Grand Theft Auto San Andreas\gta_sa.exe [2005-06-07] ()
Task: {76B37D0F-04AF-427A-A1A9-9B7F854F5B5A} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {80411427-E714-4502-BD88-AFB07BD071B6} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {80E8C892-A36B-4F15-B31F-6E8C1BB8DDD2} - System32\Tasks\Microsoft\Windows\Media Center\Extender\Update media permissions for Mcx1-C660-SATELLITE => C:\Windows\ehome\McxTask.exe
Task: {834A5824-38DE-47C0-A8C6-3BC7439D7F8C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {8DE18588-85AA-4F36-B3F8-0A5C4BAA6DF8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20] (Adobe Systems Incorporated)
Task: {8E5384E0-DFF0-4314-819B-326795A61DE4} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {9359A247-1A43-4924-8D7B-2773DB4A445A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {94020E0C-DD41-4077-937F-E5560E6E2D7B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {989C50D2-D53D-4A8D-9E09-6C8E7105FE66} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {9E9F31FD-2944-4C38-842F-126170C9ED65} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {9F3FAF4E-D46E-4236-B1E3-4876450F24E9} - \ConfigFree Startup Programs -> Keine Datei <==== ACHTUNG
Task: {A0CD8D4D-9B6C-4AF3-910B-AD63AEF3A853} - System32\Tasks\{608AEE60-9F1D-40A8-ADAE-1B582A14EA02} => Firefox.exe hxxp://ui.skype.com/ui/0/5.3.0.120/en/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:offered-installed;madedefault
Task: {A3F791AE-5D61-4483-9AD0-E8A0E57F8158} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {B136FA39-A475-42CD-A950-02E33C721F6B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {B5E41781-CCAB-4E7F-83D4-59FA9236A834} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {C41FF9E2-9E3E-4625-A8B6-3D33136D718E} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {C6CD496B-507A-4677-A9FC-13C917D1DB2F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {C7E1FF56-265E-4A24-BC16-17954935440E} - System32\Tasks\{24AA1454-41C5-4D7C-9407-688D19857517} => pcalua.exe -a E:\SETUP.EXE -d E:\
Task: {CC8EEBDF-9A63-4EDD-817F-DA9D82326F09} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-01-20] (AVAST Software)
Task: {CDAD0717-88E3-44AE-BE43-8BD7C05A46EF} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {D69EB2D2-E782-4B75-8649-69D665C3E027} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-12-22] (Microsoft Corporation)
Task: {E6F5BC82-12AE-4AB2-8591-AF351AA21434} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {EAEB87BD-FD6F-40A9-A9FF-661823466227} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {EBD79B9A-1467-4E15-BCF6-C1ED766B8619} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {EED2C01E-CA45-4E7B-A2AE-97EC454DAE58} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-12-22] (Microsoft Corporation)
Task: {EF1265EB-6A9C-4C96-B758-DAF67ABC5474} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {F16D33FE-FB4A-4745-99E2-E6D64F4B16B2} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {F1AAF8CD-21C0-43B7-A487-85798333B1E3} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-03-20 17:12 - 2015-03-20 17:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 17:12 - 2015-03-20 17:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-04-08 15:09 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2013-10-17 14:27 - 2013-10-17 14:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2015-12-05 10:55 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-05 10:55 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2014-08-06 12:42 - 2014-08-06 12:42 - 00821600 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
2015-12-18 16:44 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-12-18 16:44 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-01-14 15:47 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-01-14 15:47 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-01-14 15:47 - 2016-01-05 02:24 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-01-14 15:47 - 2016-01-05 02:26 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-01 20:00 - 2015-06-01 20:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-11-18 16:18 - 2010-11-18 16:18 - 11190784 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll
2010-12-08 14:42 - 2010-12-08 14:42 - 00079264 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll
2016-01-20 21:10 - 2016-01-20 21:10 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-01-20 21:10 - 2016-01-20 21:10 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-01-20 21:13 - 2016-01-20 21:13 - 02818048 _____ () C:\Program Files\AVAST Software\Avast\defs\16012001\algo.dll
2016-01-20 21:10 - 2016-01-20 21:10 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-01-21 12:02 - 2016-01-21 12:02 - 02818048 _____ () C:\Program Files\AVAST Software\Avast\defs\16012100\algo.dll
2014-08-06 12:40 - 2014-08-06 12:40 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2014-08-06 12:41 - 2014-08-06 12:41 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2014-08-06 12:41 - 2014-08-06 12:41 - 00059752 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2014-08-06 12:41 - 2014-08-06 12:41 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2014-08-06 12:42 - 2014-08-06 12:42 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2014-08-06 12:44 - 2014-08-06 12:44 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2014-08-06 12:46 - 2014-08-06 12:46 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
2016-01-20 21:10 - 2016-01-20 21:10 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\Control Panel\Desktop\\Wallpaper -> c:\users\c660\appdata\roaming\mozilla\firefox\desktop-hintergrund.bmp
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{61AA3966-1625-46EC-A7DF-7813AD5E7050}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7F7B8E1C-F3E3-43F9-8315-CFAF54F21F95}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{91AC7473-92CA-4311-B9A8-F75F750C05C9}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{382FDCCD-C40A-4FE3-A1CC-394AD03BE649}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{691DF62F-47DE-4616-B1AC-27598E6C7BCB}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{0673035E-A51F-4873-8FC3-8FD7DCDD891E}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{6AEEF892-0E26-45B7-86DF-7C92D06AD717}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 16 DEMO\fifasetup\fifaconfig.exe
FirewallRules: [{DF05EEF0-AAA4-474B-B9D4-46DAC6A2B1DF}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 16 DEMO\fifasetup\fifaconfig.exe
FirewallRules: [{B5861369-72CB-4D96-8466-D074A302F6A0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CCF62871-2616-4DC9-A5AB-42896EA14AFB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{11C2F16C-B1F6-45B5-A5A3-704B8FA38A7C}] => (Allow) LPort=2869
FirewallRules: [{C2BA6A53-054F-4E0A-915E-C9FF66815614}] => (Allow) LPort=1900
FirewallRules: [{B3693E23-4D08-41D7-B734-2FAED8EC0F98}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{73DA9A6E-A8AB-4F76-9FB9-E4ACA1655AFC}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [TCP Query User{20989EF4-7E5D-4248-B20E-C0E5CCA425AC}C:\program files (x86)\virtualdj\virtualdj_home.exe] => (Block) C:\program files (x86)\virtualdj\virtualdj_home.exe
FirewallRules: [UDP Query User{E01F5E1E-349A-46B3-B443-3A50B27BABEE}C:\program files (x86)\virtualdj\virtualdj_home.exe] => (Block) C:\program files (x86)\virtualdj\virtualdj_home.exe
FirewallRules: [TCP Query User{13C29D65-F7F1-4C0A-9FF2-8CDE6C4CCF4A}C:\users\c660\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\c660\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{F7A8405D-C2F1-4EC4-8485-2AA2AEF32492}C:\users\c660\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\c660\appdata\roaming\spotify\spotify.exe
FirewallRules: [{6A987701-D241-4B40-A7C4-1590D0693FDF}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{D64A8F47-60E0-43F7-B941-015BF3A4279E}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{C8F799EE-28AC-41D5-BE89-2ECA70D71E16}] => (Allow) B:\Assassin's Creed II\AssassinsCreedIIGame.exe
FirewallRules: [{712E5D25-5008-460A-85EF-6554C63DFDB7}] => (Allow) B:\Assassin's Creed II\AssassinsCreedIIGame.exe
FirewallRules: [{C56BEC27-D776-41D6-9C66-30A967A1CBA3}] => (Allow) B:\Assassin's Creed II\AssassinsCreedII.exe
FirewallRules: [{3E1BB866-95EE-42AD-A4AA-86F3FB546A62}] => (Allow) B:\Assassin's Creed II\AssassinsCreedII.exe
FirewallRules: [{2B0AEE32-5869-4AA0-B067-DC62523DE56F}] => (Allow) B:\Assassin's Creed II\UPlayBrowser.exe
FirewallRules: [{5A61B872-73FC-49A7-B817-24A810A67DD4}] => (Allow) B:\Assassin's Creed II\UPlayBrowser.exe
FirewallRules: [{8A158788-AB60-4588-88C5-0056512F2068}] => (Allow) B:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{049B2480-A433-4F33-ADD8-97ACCA3086A4}] => (Allow) B:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A4E0257C-74C9-4930-8BAC-E48B22228FD0}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{CA7D3D3A-EAA3-499C-827A-1AE1847EF22D}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{0058E476-FD05-4DC3-8116-98CB4C5C4D1F}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{67FB7CF0-C7E6-4343-8939-E19C2D14D851}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{CE73D4DC-2D87-42D0-BB87-2F5998B53B54}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{530B6D7F-9FA2-4449-B25D-2D3AA323A9B6}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{180068F7-5AFE-4806-975A-EF0B7B3A8ED8}] => (Allow) C:\Program Files\HP\HP Officejet 6600\Bin\DeviceSetup.exe
FirewallRules: [{ABF5C119-18AD-4AB7-9CD7-811B86965408}] => (Allow) C:\Program Files\HP\HP Officejet 6600\Bin\HPNetworkCommunicator.exe
FirewallRules: [TCP Query User{6E8971BB-E66A-4D00-A44D-61B023F5A3EC}C:\users\c660\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\c660\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{D958113B-F816-4175-AB63-760D50B82DFD}C:\users\c660\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\c660\appdata\roaming\spotify\spotify.exe
FirewallRules: [{A48F85C3-CAF5-47D9-93AF-BB256E8B8B85}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{C2E715FF-E05D-427F-859A-0F2909E8AC37}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [TCP Query User{FF130EFF-5FA1-4C09-BC31-C61533C9FC3E}C:\program files\java\jre7\bin\javaw.exe] => (Block) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{59616DD3-206C-4B3E-A656-B7269A2DC0DA}C:\program files\java\jre7\bin\javaw.exe] => (Block) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{5D78872F-B982-40A1-976C-AB98287F8D2C}B:\program files (x86)\steam\steam.exe] => (Allow) B:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{0A11722F-405E-4D77-AE0C-923127D45517}B:\program files (x86)\steam\steam.exe] => (Allow) B:\program files (x86)\steam\steam.exe
FirewallRules: [{752F203D-8FF5-43D2-AA82-C4CE8161810D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{C6FD3DF0-D669-4F6C-9B15-9594B2B26BD0}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe
FirewallRules: [{677005C1-DBBD-4BB7-A37C-2B229ECD8A29}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe
FirewallRules: [{5763018D-4470-46CA-8E68-EFBB455A60C8}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{710BCF9B-581D-46C4-B199-7F5A23749712}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{EF6BCCAC-9E1C-4CA3-B8C5-07B569C98A77}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{28B6E8A3-8247-4316-BD9F-CBECA8B7DE3F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D9456238-6510-4CC1-9A91-363FC87AD9D4}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F84E9DE0-D017-4D09-9BB2-22F0DB7EFE0E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{DCCA68AC-93E6-46B5-BAE0-36B7F06C164B}C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe] => (Allow) C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe
FirewallRules: [UDP Query User{1232594F-8D06-4ED5-B9EF-2CC3F5FEB509}C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe] => (Allow) C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe
FirewallRules: [{8546E375-B32D-4EEC-9FCD-2003E0B817BA}] => (Block) C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe
FirewallRules: [{ED630D36-1402-423D-9200-542B7A90066C}] => (Block) C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe
FirewallRules: [{A0606591-86C6-49A9-BFB9-19601745AF60}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5AD7DB5B-B7DD-4B8C-94B9-A83031636549}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{79FFFB1E-AE01-45CC-851F-FF203E69FB13}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{4F80FB83-217A-406E-B234-8AC86352BD86}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FB932008-DD8B-40AC-8E15-F38C98885256}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{C46EC070-F2C5-4BE6-85BD-CFFA38F6166B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7E0CFBB4-A1A7-4002-A176-F890EEFF04ED}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D7028CBE-9738-4BF5-9A4B-F623A0A19D05}] => (Allow) B:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{31F422B1-ACB5-47AA-A46E-CD0994CB69D4}] => (Allow) B:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{D8AA66A2-5684-4EB7-B065-031E11477E52}B:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) B:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{94888B5C-0857-4691-BD95-3466DBA2F302}B:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) B:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{D20D350D-082D-4638-91C5-5D29FD5E4DDF}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{91099417-3E88-42DA-9D21-43B88A27AA85}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Wiederherstellungspunkte =========================
14-01-2016 16:16:58 Windows Update
17-01-2016 18:16:47 Installed TI Connect™
20-01-2016 21:53:09 Removed eBay
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Synaptics PS/2 Port TouchPad
Description: Synaptics PS/2 Port TouchPad
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Synaptics
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (01/21/2016 10:12:55 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: C660-Satellite)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/21/2016 10:12:54 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Microsoft.Photos.exe, Version 15.1208.10480.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1ec8
Startzeit: 01d1542bd17c2968
Beendigungszeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
Berichts-ID: 19582a1f-c01f-11e5-9bd2-b870f466cabd
Vollständiger Name des fehlerhaften Pakets: Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe
Auf das fehlerhafte Paket bezogene Anwendungs-ID: App
Error: (01/20/2016 10:53:42 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" in Zeile UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (01/20/2016 10:44:00 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service
Error: (01/20/2016 10:44:00 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: Der Dienst TMachInfo wurde nicht auf dem Computer . gefunden.
Error: (01/20/2016 09:53:42 PM) (Source: MsiInstaller) (EventID: 11001) (User: C660-Satellite)
Description: Product: eBay -- Error 1001. Error 1001. Beim Initialisieren der Installation ist eine Ausnahme aufgetreten:
System.IO.FileNotFoundException: Die Datei oder Assembly "file:///C:\Program Files (x86)\eBay\eBay.exe" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (01/20/2016 09:53:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (01/20/2016 09:21:14 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service
Error: (01/20/2016 09:21:14 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: Der Dienst TMachInfo wurde nicht auf dem Computer . gefunden.
Error: (01/20/2016 09:07:45 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service
Systemfehler:
=============
Error: (01/20/2016 10:40:23 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (01/20/2016 10:39:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_3366e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/20/2016 10:39:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _3366e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/20/2016 10:39:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_3366e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/20/2016 10:39:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_3366e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/20/2016 09:24:04 PM) (Source: DCOM) (EventID: 10016) (User: C660-Satellite)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}C660-SatelliteC660S-1-5-21-2557430510-3623771520-2665204530-1000LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (01/20/2016 09:24:03 PM) (Source: DCOM) (EventID: 10016) (User: C660-Satellite)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}C660-SatelliteC660S-1-5-21-2557430510-3623771520-2665204530-1000LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (01/20/2016 09:18:00 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (01/20/2016 09:16:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_306bb" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/20/2016 09:05:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NetPipeActivator" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
CodeIntegrity:
===================================
Date: 2016-01-20 22:21:26.900
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-20 20:24:32.952
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-06 20:50:58.968
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-31 10:56:55.163
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-11 21:14:30.617
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-10 14:43:25.799
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-08 15:28:57.154
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-07 12:21:16.571
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-06 11:31:11.891
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-04 19:16:32.867
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 34%
Installierter physikalischer RAM: 8099.76 MB
Verfügbarer physikalischer RAM: 5317.22 MB
Summe virtueller Speicher: 10099.76 MB
Verfügbarer virtueller Speicher: 6571.28 MB
==================== Laufwerke ================================
Drive b: (Volume) (Fixed) (Total:229.44 GB) (Free:185.72 GB) NTFS
Drive c: (WINDOWS) (Fixed) (Total:232.88 GB) (Free:90.52 GB) NTFS
Drive d: (Data) (Fixed) (Total:3.05 GB) (Free:0 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: DB8CF73D)
Partition 1: (Active) - (Size=400 MB) - (Type=27)
Partition 2: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=3 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=229.4 GB) - (Type=OF Extended)
==================== Ende von Addition.txt ============================
|
|
21.01.2016, 13:18
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA Adware/Junkware/Toolbars entfernen Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop! Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren! 1. Schritt: adwCleaner Downloade Dir bitte  AdwCleaner auf deinen Desktop.
2. Schritt: JRT - Junkware Removal Tool Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
3. Schritt: Frisches Log mit FRST Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ --> Malwarebytes: 360 PUP´s & Trojan.Agent.FSA |
|
21.01.2016, 15:49
| #7 |
| | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA Ok, auch das habe ich jetzt alles durchgeführt. AdwCleaner: Code:
ATTFilter # AdwCleaner v5.030 - Bericht erstellt am 21/01/2016 um 15:29:20
# Aktualisiert am 17/01/2016 von Xplode
# Datenbank : 2016-01-19.2 [Server]
# Betriebssystem : Windows 10 Home (x64)
# Benutzername : C660 - C660-SATELLITE
# Gestartet von : C:\Users\C660\Downloads\adwcleaner_5.030.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum
***** [ Dienste ] *****
***** [ Ordner ] *****
[-] Ordner Gelöscht : C:\ftb
[-] Ordner Gelöscht : C:\Program Files (x86)\Conduit
[-] Ordner Gelöscht : C:\Program Files (x86)\Free Video Converter
[-] Ordner Gelöscht : C:\ProgramData\FreeRIP
[-] Ordner Gelöscht : C:\Users\C660\AppData\Local\AskToolbar
[-] Ordner Gelöscht : C:\Users\C660\AppData\LocalLow\Conduit
[-] Ordner Gelöscht : C:\Users\C660\AppData\LocalLow\PriceGong
[-] Ordner Gelöscht : C:\Users\C660\AppData\LocalLow\searchquband
[-] Ordner Gelöscht : C:\Users\C660\AppData\Roaming\dvdvideosoftiehelpers
[-] Ordner Gelöscht : C:\Users\C660\AppData\Roaming\OpenCandy
[-] Ordner Gelöscht : C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\ConduitCommon
[-] Ordner Gelöscht : C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\Smartbar
***** [ Dateien ] *****
[-] Datei Gelöscht : C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\user.js
***** [ DLLs ] *****
***** [ Verknüpfungen ] *****
***** [ Aufgabenplanung ] *****
[-] Geplante Aufgabe Gelöscht : OpenCandyHelperRunOnce
***** [ Registrierungsdatenbank ] *****
[-] Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{ACAA314B-EEBA-48E4-AD47-84E31C44796C}]
[-] Wert Gelöscht : HKCU\Software\Mozilla\Firefox\Extensions [{b64d9b05-48e1-4ceb-bf58-e0643994e900}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [webbooster@iminent.com]
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{94952EC4-DB66-3F32-BE4C-F0BB875EA98E}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E634228A-03CF-4BC8-B0AB-668257F1FD8C}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{58124A0B-DC32-4180-9BFF-E0E21AE34026}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{977AE9CC-AF83-45E8-9E03-E2798216E2D5}]
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{A09AB6EB-31B5-454C-97EC-9B294D92EE2A}]
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68B81CCD-A80C-4060-8947-5AE69ED01199}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{E6B969FB-6D33-48D2-9061-8BBD4899EB08}
[-] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{872B5B88-9DB5-4310-BDD0-AC189557E5F5}]
[-] Wert Gelöscht : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{94952EC4-DB66-3F32-BE4C-F0BB875EA98E}
[-] Schlüssel Gelöscht : HKCU\Software\APN PIP
[-] Schlüssel Gelöscht : HKCU\Software\MGShareware
[-] Schlüssel Gelöscht : HKCU\Software\Myfree Codec
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKCU\Software\Softonic
[-] Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\Conduit
[-] Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\PriceGong
[-] Schlüssel Gelöscht : HKCU\Software\AppDataLow\Software\searchqutoolbar
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\MGShareware
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Myfree Codec
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\PIP
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\MyFreeCodec
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchTheWebARP
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0238BBE24EA3A70408B81E4BB89C15E5
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29799DE249E7DBC459FC6C8F07EB8375
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\649A52D257CA5DB4EAAE8BA9EB23E467
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\18C9E3869A16248439FE3FF9EB02207A
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5D8011310B2622942868A458964FFDC5
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6C63F7979DCC2154CB9591969A5CB89D
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6DD31E6C1A73B334383DF186676F4D20
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AB3204F747B20694B8D49EF92D8DC94B
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C81E33A400B6F814E90C7A3354E2A3A5
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EDBF68C5F16790341B7C6FD7C7F8E4FC
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FFA531D0F3A71504DA7AC6A11CE33739
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Main [Search Bar]
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [Default_Search_URL]
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\Search [SearchAssistant]
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0A55001B-3E7B-4516-9318-C6BBFDC4C909}
[-] Daten Wiederhergestellt : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}
[-] Daten Wiederhergestellt : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2414}
[-] Daten Wiederhergestellt : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes [DefaultScope]
***** [ Internetbrowser ] *****
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050..clientLogIsEnabled", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050..clientLogServiceUrl", "hxxp://clientlog.users.conduit.com/ClientDiagnostics.asmx/ReportDiagnosticsEvent");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050..uninstallLogServiceUrl", "hxxp://uninstall.users.conduit.com/Uninstall.asmx/RegisterToolbarUninstallation");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.ALLOW_SHOWING_HIDDEN_TOOLBAR", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.AboutPrivacyUrl", "hxxp://www.conduit.com/privacy/Default.aspx");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.BrowserCompStateIsOpen_129575150554007677", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.BrowserCompStateIsOpen_129681780741097243", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.CTID", "CT2269050");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.CurrentServerDate", "25-5-2012");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.DialogsAlignMode", "LTR");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.DialogsGetterLastCheckTime", "Thu May 24 2012 20:21:39 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.DownloadReferralCookieData", "");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.EMailNotifierPollDate", "Sun Aug 21 2011 19:28:20 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.FirstServerDate", "21-8-2011");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.FirstTime", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.FirstTimeFF3", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.FixPageNotFoundErrors", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.GroupingServerCheckInterval", 1440);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.GroupingServiceUrl", "hxxp://grouping.services.conduit.com/");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.HasUserGlobalKeys", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.HomePageProtectorEnabled", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.Initialize", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.InitializeCommonPrefs", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.InstallationAndCookieDataSentCount", 3);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.InstallationType", "UnknownIntegration");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.InstalledDate", "Sun Aug 21 2011 18:37:47 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.InvalidateCache", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.IsGrouping", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.IsInitSetupIni", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.IsMulticommunity", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.IsOpenThankYouPage", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.IsOpenUninstallPage", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.IsProtectorsInit", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.LanguagePackLastCheckTime", "Thu May 24 2012 20:31:11 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.LanguagePackReloadIntervalMM", 1440);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.LanguagePackServiceUrl", "hxxp://translation.users.conduit.com/Translation.ashx");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.LastLogin_3.12.0.7", "Thu Apr 26 2012 21:10:40 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.LastLogin_3.12.2.3", "Fri May 25 2012 19:45:51 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.LastLogin_3.6.0.10", "Sun Aug 21 2011 18:37:47 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.LatestVersion", "3.13.0.6");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.Locale", "en");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.MCDetectTooltipHeight", "83");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.MCDetectTooltipUrl", "hxxp://@EB_INSTALL_LINK@/rank/tooltip/?version=1");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.MCDetectTooltipWidth", "295");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.MyStuffEnabledAtInstallation", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.OriginalFirstVersion", "3.6.0.10");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.RadioIsPodcast", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.RadioLastCheckTime", "Sun Aug 21 2011 18:37:48 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.RadioLastUpdateIPServer", "3");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.RadioLastUpdateServer", "129132338014870000");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.RadioMediaID", "12473383");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.RadioMediaType", "Media Player");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.RadioMenuSelectedID", "EBRadioMenu_CT226905012473383");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.RadioShrinkedFromSetup", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.RadioStationName", "Hotmix%20108");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.RadioStationURL", "hxxp://67.202.67.18:8082");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SavedHomepage", "hxxp://www.google.de/");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SearchEngineBeforeUnload", "DVDVideoSoftTB Customized Web Search");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SearchFromAddressBarIsInit", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=2&q=");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SearchInNewTabEnabled", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SearchInNewTabIntervalMM", 1440);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SearchInNewTabLastCheckTime", "Thu May 24 2012 20:55:31 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SearchInNewTabServiceUrl", "hxxp://newtab.conduit-hosting.com/newtab/?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SearchInNewTabUsageUrl", "hxxp://Usage.Hosting.conduit-services.com/UsageService.asmx/UsersRequests?ctid=EB_TOOLBAR_ID");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SearchProtectorEnabled", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SearchProtectorToolbarDisabled", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.ServiceMapLastCheckTime", "Thu May 24 2012 20:55:32 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SettingsLastCheckTime", "Fri May 25 2012 19:45:49 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.SettingsLastUpdate", "1337169810");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.ThirdPartyComponentsInterval", 504);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.ThirdPartyComponentsLastCheck", "Sun Aug 21 2011 18:37:46 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.ThirdPartyComponentsLastUpdate", "1246786978");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.ToolbarShrinkedFromSetup", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.TrustedApiDomains", "conduit.com,conduit-hosting.com,conduit-services.com,client.conduit-storage.com,OurToolbar.com,CommunityToolbars.com,ForumToolbar.com,MyBlogToolbar.com,MyCity[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.UserID", "UN34749134298436082");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.WeatherNetwork", "");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.WeatherPollDate", "Sun Aug 21 2011 19:28:21 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.WeatherUnit", "C");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.addressBarTakeOverEnabledInHidden", "true");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.alertChannelId", "666138");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.autoDisableScopes", -1);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e+x305", "247E27413334363379453A3D2A722C797A7E7A3128333B4D474549484C5952594B335E5356432C45333438334A414C546660576364676F6A5E4B766B6E5B445D4B4C504A6259646C787A2[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e,x305", "247E28412F3F3E3779453A3D2A722C797B787D3128333C4748402C574C4F3C253E2C2E2B2F433A454E59505B57676A66426D62455E69543D56444643465B525D66716C216E6B587D73675[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e-x305", "247E2936303C363679453A3D2A722C797A207B3128333D462B554A4D4B4749594D33535D4F432C45333439344A414C565B5E6C656E706C7164736D4D786D705D465F4D4E534D645B66705[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e.:2z527", "247E706A73744345343D4436387E4A3F422F77317D7C207E362D382A242C2D2F27335E5356432C45313839324A414C3E6E445E6D6B6F6749737358415A464A4D4B5F5661515555515A7[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e.x305", "247E2A4137374434337A463B3E2B732D7A7D7C213229343F564654524C474A595A4851505E51523964595C49324B393C3B3E5047525D6C6A6B6F786D68506A6F7171742256227679664F6[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e/x305", "247E2B413536327844393C29712B787C7B773027323E4C4343534E2D585B3C253E2C302E34433A45515862695E675A416C6164513A5341454348584F5A666D7B7C7174726E702174745B2[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e06cg5el8:", "6E6D706F6A7071717272");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e06cg5el;8i:k", "247E2D2F226A74737675707677777878242F4B49474F42357D5D5C3D");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e0x305", "247E2C403A407743383B28702A777C757D2F26313E41295547484D515A4E5A59325D5255422B443237303749404B585E685E706E6E6674626E696B4D786D705D465F4D524B51645B66732[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e1x305", "247E2D41313D403279453A3D2A722C7A77797E31283341473E454745482F5A4F523F2841302D2F33463D48566265685C6B675F6D70604873686B58415A4946484B5F56616F7C217D74747[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e2x305", "247E2E3542313D3D393A7B473C3F2C742E79207D32293443525747472E594E513E27402F313133453C4756625C5C5D656169445F685B4873686B58415A494B4B4C5F56617020257425215[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e3x305", "247E2F413F3B36333F47463F7D493E412E76307E222421352C37474B59574B4A4858584E5E3762573A535E49324B3A3D3F3B504752626C625D75786D766A7C517C7174614A63525557526[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e4x305", "247E302C407642373A276F29777B74762E2530413E4F494A522B55553A233C2B2F282941384354515E5D56615F56685C426D6265523B544346494A59505B6C697A7E21702370765925797[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e5x305", "247E3136422B7743383B28702A79757A772F2631434B3D49564A50592E594E314A55402942322E332F473E495B5D595A6A5E58707262674974696C59425B4B474B51605762747C2473737[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e6x305", "247E322C3E32323238453E7C483D402D752F7E7B2424342B364953545259585A5A50524E36615659462F4838353D3C4D444F62666F6674605E4B766B6E5B445D4D4A52506259647722232[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e7x305", "247E333D2C3F3E3F79453A3D2A722C7B7A797A312833474745544646494D50315C5154412A4333323131483F4A5E5E5C5B68706E726762676264756B6C6A6A517C7174614A63535251506[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e8x305", "247E3441402B327844393C29712B7A7C207D3027324740434E5550594D49574C565B535E36615659462F48383A3D3A4D444F64716F6B6267626A754D786D705D465F4F515450645B667B2[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e9x305", "247E35332C3F327844393C29712B7B757979302732484C4F4F44504C4754585C5048345F5457442D46373135344B424D636B5D5F5F73696B4A756A6D5A435C4D474B4961586379226F742[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e:x305", "247E36333B38327844393C29712B7B76797A30273249485545442C574C4F3C253E2F2A2D2D433A455C67555B5E3F6A5F624F3851423D403F564D586F7A68786C717154207477644D66575[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e;x305", "247E373F333F3738422F7B473C3F2C742E7E7A7A22332A354D462C574C4F3C253E2F2B2B31433A455D6356575C5C5A416C6164513A5344404045584F5A7273717A786D2256227679664F6[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e<x305", "247E38343030442F463644377D493E412E7630217D2426352C37502E4F4747315C5154412A4334313738483F4A635F5A6A645E625A4772676A5740594A474D4D5E55607971246E7778257[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e=x305", "247E3933363F41413739357C483D402D752F207E2022342B36505459574C554F515B345F5457442D46373637384B424D676B706E606F61666B63664D786D705D465F504F5050645B66212[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e>x305", "247E3A41363F323238387B473C3F2C742E7E20217C332A35504F5346482F5A4F523F28413233342F463D48635C5D66626A436E6366533C55464748425A515C77707773202371215925797[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e?x305", "247E3B2D2F2F334134403A3A7D494C2D752F2023207E342B3652504C5249555256525C35605558452E47383B38364C434E6A706F5F65635D736F677578684C65706B54207477644D66575[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7e@x305", "247E3C40422B7743383B28702A7B767E782F26314E52543D2A554A2D46513C253E302B332C433A45626756516259655F5F436E63465F6A553E5749444C445C535E7B21747C7821745A267[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7eax305", "247E3D3D37387743383B28702A7B7A757E2F26314F4F544A52404548564F58315C5154412A4335342F37483F4A68646B645D5E626462616D6971726B6C786A517C7174614A6355544F566[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7ebe3g=;d9n9=d", "372C2D326975762E3A3C7B3A39434A494841434B265146492965504656496571734D334B57");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7ebx305", "247E3E393141303D33454036327E4A3F422F77317B7D23352C37565949484E4F51525C4E4C55535B54605A5A3E695E614E37503B3D41544B567575656D7367796D6D7C55217578654E675[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7ecx305", "247E3F3D303043312E7A463B3E2B732D7B207E3128335351565551575A4F584C5E335E5356432C4534383649404B6B59566C686B46716669563F58474B485C535E7E6C6956227679664F6[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7edx305", "247E4035422A363879453A3D2A722C7D202F26315247543C484A2C574C2F48533E27403233433A45665B68505C5E406B6E4F38514343544B56776C79616D6F517C71547873634C6557566[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b+7etx305", "247E6E2F2E3B323342357B44392B732D7A7B7B7C322934215642542D584D503D263F2D2E2E2E443B4635645E6669595C6062686F5C7363716F696467764F7A6F725F48614F50504F665D6[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b-0?3g>d", "693C6F3E7270706D7A75477372204C7A7C7E25504E537C2A245527272A27282E2D28292C");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b-0?3g@6:5;", "");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b-3=3eccja=f>", "247E333D2C452F4135276F297B7E7D21202F26313E4249357D37382F3A494D5D513F283338435D6554695B65546D57695D5D686365533C70766C66755E");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b/>01=9a6k6<im;krie@pdawm", "676A6D7273747576");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b3=>@44i48?", "372C2D326975763342363341484776213F3E484F4E4D4648502B564B4E2E5959595F4C564F3764535750");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b5ba==9cjag", "3E3E706E3D416E437A42724745487C4C4E7C7A234D");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b6b11g4c56b>f;p;anr@p", "6E6D706F6A707170716F737774");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b9643g3/9e", "6A");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b<:222h64<", "393F352F3E");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b=+03eh8h8j?:", "4443");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b?+e2a52d8", "372C2D326975762E3A3C7B3A39434A494841434B2651464929655046566470727951555E5E52");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9b?b0d:8aj62<h", "6D");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.backendstorage./9ba@0<0bi6a7gn:6@l?", "6E6B");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.embeddedsData", "[{\"appId\":\"128834881989343895\",\"apiPermissions\":{\"crossDomainAjax\":true,\"getMainFrameTitle\":true,\"getMainFrameUrl\":true,\"getSearchTerm\":true,\"insta[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.firstTimeDialogOpened", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.fixPageNotFoundErrorInHidden", "true");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.fixUrls", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.generalConfigFromLogin", "{\"ApiMaxAlerts\":\"12\",\"SocialDomains\":\"social.conduit.com;apps.conduit.com;services.apps.conduit.com\",\"AppsDetectionUrlPattern\":\"hxxp://appdown[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.globalFirstTimeInfoLastCheckTime", "Sun Aug 21 2011 18:37:47 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.homepageProtectorEnableByLogin", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.initDone", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.isAppTrackingManagerOn", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.isFirstRadioInstallation", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.isNewTabEnabled", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.isPerformedSmartBarTransition", "true");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.keyword", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.myStuffEnabled", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.myStuffPublihserMinWidth", 400);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.myStuffSearchUrl", "hxxp://Apps.conduit.com/search?q=SEARCH_TERM&SearchSourceOrigin=29&ctid=EB_TOOLBAR_ID&octid=EB_ORIGINAL_CTID");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.myStuffServiceIntervalMM", 1440);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.myStuffServiceUrl", "hxxp://mystuff.conduit-services.com/MyStuffService.ashx?ComponentId=EB_MY_STUFF_INSTANCE_GUID&lut=EB_MY_STUFF_LUT");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxp%3A%2F%2Fget.adobe.com%2Fde%2Fflashplayer%2Fdownload%2F%3Finstaller%3DFlash_Player_11_for_Other_Browsers%26os%3DWindows%25207[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.openThankYouPage", "FALSE");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.openUninstallPage", "FALSE");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.revertSettingsEnabled", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.searchInNewTabEnabledInHidden", "true");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.searchProtectorDialogDelayInSec", 10);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.searchProtectorEnableByLogin", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\"}");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"data\":\"CT2269050\"}");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"string\",\"data\":\"hxxp://DVDVideoSoftTB.OurToolbar.com//xpi\"}");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"string\",\"data\":\"DVDVideoSoftTB\"}");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data\":\"true\"}");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.serviceLayer_service_usage_toolbarUsageCount", "{\"dataType\":\"number\",\"data\":\"2\"}");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.serviceLayer_services_login_10.10.20.14_lastUpdate", "1346087121299");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.serviceLayer_services_login_10.10.27.6_lastUpdate", "1349537043113");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.serviceLayer_services_serviceMap_lastUpdate", "1349472228783");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.serviceLayer_services_toolbarSettings_lastUpdate", "1349537043058");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.serviceLayer_services_translation_lastUpdate", "1349472229052");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.settingsINI", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.shouldFirstTimeDialog", "FALSE");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.smartbar.CTID", "CT2269050");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.smartbar.Uninstall", "0");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.smartbar.toolbarName", "DVDVideoSoftTB ");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.startPage", "userChanged");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.testingCtid", "");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.toolbarAppMetaDataLastCheckTime", "Thu May 24 2012 20:55:31 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.toolbarBornServerTime", "21-8-2011");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.toolbarContextMenuLastCheckTime", "Sun Aug 21 2011 18:37:47 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.toolbarCurrentServerTime", "6-10-2012");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.toolbarDisabled", "true");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CT2269050.usagesFlag", 2);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT2269050&SearchSource=13");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ConduitSearchList", "DVDVideoSoftTB Customized Web Search");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://Settings.toolbar.search.conduit.com/root/CT2269050/CT2269050", "\"7c88817ecb0feb19e608f9f86aecd0d11\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://alerts.conduit-services.com/root/666138/661999/DE", "\"0\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://appsmetadata.toolbar.conduit-services.com/?ctid=CT2269050", "\"1323704474\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=GottenApps&locale=en", "wVmmvqqOMqrv5xct1cJIHg==");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=OtherApps&locale=en", "0uSPYx+Kl2jpu8sJZMeHjw==");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=SharedApps&locale=en", "Dclc8oo4TTv7+mAkSlUSWg==");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://contextmenu.toolbar.conduit-services.com/?name=Toolbar&locale=en", "K4Vqu91uAzWURlxJRdXJOg==");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.alert.conduit-services.com/alert/dlg.pkg", "\"07879643d3acc1:0\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.0.7", "\"4ead38b3e6bcd1:0\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.12.2.3", "\"4ead38b3e6bcd1:0\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://dynamicdialogs.toolbar.conduit-services.com/DLG.pkg?ver=3.6.0.10", "\"80161a5ed5ccc1:0\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://servicemap.conduit-services.com/Toolbar/?ownerId=CT2269050", "\"d76323372b05c3748a3d6b1c93a98292\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://settings.toolbar.conduit-services.com/?ctid=CT2269050&octid=CT2269050", "\"1313595511\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/equalizer_dead.gif", "\"0a8c48d3330c81:0\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/minimize.gif", "\"0e2106f3030c81:0\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/play.gif", "\"0f475394430c81:0\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/stop.gif", "\"08d9ef44430c81:0\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://storage.conduit.com/BankImages/RadioSkins/Bluenote/vol.gif", "\"066e8863030c81:0\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ETag.hxxp://translation.toolbar.conduit-services.com/?locale=en", "\"67e1ac93c8bab6bfc9801049c6b49194\"");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.LatestLibsPath", "file:///C:\\Users\\C660\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\0sqr3ps3.default\\conduitCommon\\modules\\3.6.0.10");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.LatestToolbarVersionInstalled", "3.6.0.10");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.SearchFromAddressBarSavedUrl", "");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ToolbarsList", "CT2269050");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ToolbarsList2", "CT2269050");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.ToolbarsList4", "CT2269050");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.globalUserId", "2b5c96ed-13ac-44a8-92c6-1b27ea31dedc");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.isAlertUrlAddedToFeedItemTable", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.isClickActionAddedToFeedItemTable", true);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.keywordURLSelectedCTID", "CT2269050");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.alertDialogsGetterLastCheckTime", "Sun Aug 21 2011 18:37:48 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.alertInfoInterval", 1440);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.alertInfoLastCheckTime", "Sun Aug 21 2011 20:20:43 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.clientsServerUrl", "hxxp://alert.client.conduit.com");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.locale", "en");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.loginIntervalMin", 1440);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.loginLastCheckTime", "Sun Aug 21 2011 18:37:46 GMT+0200");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.loginLastUpdateTime", "1313487611");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.messageShowTimeSec", 20);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.servicesServerUrl", "hxxp://alert.services.conduit.com");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.showTrayIcon", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.userCloseIntervalMin", 300);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("CommunityToolbar.notifications.userId", "ca42ff54-07fb-4dc2-889e-9dfc01e6041f");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("Smartbar.ConduitSearchEngineList", false);
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("Smartbar.ConduitSearchUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=2&q=");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("Smartbar.keywordURLSelectedCTID", "CT2269050");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("browser.search.defaultthis.engineName", "DVDVideoSoftTB Customized Web Search");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=3&q={searchTerms}");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("browser.search.param.yahoo-fr", "chr-greentree_ff&ilc=12&type=386496");
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("browser.uiCustomization.state", "{\"placements\":{\"PanelUI-contents\":[\"edit-controls\",\"zoom-controls\",\"search-container\",\"new-window-button\",\"privatebrowsing-button\",\"print-but[...]
[-] [C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js] [Preference] Gelöscht : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2269050&SearchSource=2&q=");
*************************
:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Chrome Richtlinien gelöscht
########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [66397 Bytes] ##########
JRT: Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 8.0.2 (01.06.2016)
Operating System: Windows 10 Home x64
Ran by C660 (Administrator) on 21.01.2016 at 15:34:59,78
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
File System: 58
Successfully deleted: C:\Users\C660\AppData\Local\{01487038-C74D-4A5F-AD78-0E0DAB0C10BA} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{01B79A35-549C-446D-9DE7-9B7D7CC7A625} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{043189AF-F0AD-49BE-AA68-437FF9B89257} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{094FBA1E-E930-4804-9270-8CC5FC735B42} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{0F113BAD-A5D3-4455-AEF1-23D1C24284EA} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{126B675D-15A2-4DFC-B44E-C7A8C91EB395} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{12C9A9D3-27FF-4806-9E33-2BE88D72F1FC} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{15BE268D-1D22-455D-AC78-7550275BDFDD} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{21138859-FA05-4A76-A782-5497598C0D46} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{251F9DA1-2505-469E-AC19-FF4CEA7CDC35} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{372E1BBE-C84F-4AA2-8DBE-1861AFB8F5E3} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{38698605-DCB2-467A-A550-3124A16513D0} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{4982F998-73BB-4C0A-A9C3-6A5537047E7C} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{4BCAA2E1-83DB-4AF5-BC1A-E10D7530CFD4} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{4D7BBC92-B28D-422C-B67E-FE6DCCC8A3F6} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{512ACF52-9837-4465-8209-B3A3971A745D} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{597432D6-B133-4B71-B523-4528D13E3511} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{5F344E3C-C369-48AA-BF9A-062F5FD4CFDF} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{606E8F4F-7E94-45D6-9394-FBE531252B14} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{610B626C-C472-4483-B19C-56C2140D26FD} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{6650EE3E-65D4-408D-B177-C00CBBF0AC29} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{67320273-BD86-457C-B331-A3D3E6F987A2} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{724372A3-2323-49E5-9ED4-EF69C25A94FD} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{7430D64C-81CD-411C-A084-20C8953C2BC8} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{7831C3A0-454A-4302-8B05-058F7D539824} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{7D649D52-8B0B-4937-903D-2F7BC8E7E878} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{7EE92C63-953F-4892-A546-8F676E0489C2} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{85D6BCF3-F48C-4117-B71F-6F18709D273E} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{8A291990-72A1-4806-BAFD-2163DDFB307B} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{8BA3BEEF-A2C0-4C3D-B4F2-4DED429EF755} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{8C6C0DA8-5DF7-4F74-8E57-4A4093E6271F} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{8EFF7D4A-36C2-419C-99F3-F799B7C202FE} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{95AD5C07-B3AF-40FD-94E5-4205D76546C3} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{98290432-4D2A-4D7A-9318-B31F75B37F79} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{9D489B41-CA85-4EDA-BFE4-9F4262356FB0} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{A23830AB-6584-4960-8495-49AAFB1D6A3C} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{A284957C-AC79-476A-8387-7A22F99C6DC6} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{A4188527-D774-4655-92FD-EC70C13A39CD} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{A56A3536-BD33-4BA3-8B1B-9D26B12956E5} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{AE7ED9F7-9821-4A37-B9CC-0EA2B8F6D3D7} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{B283C81E-13D6-4BA7-967A-D5208B23A39E} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{B49B0E30-7585-4ABE-9E6F-C51C34B8AF21} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{B6C20ABC-2C00-4C33-B7FB-D624BD37DECE} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{B6F9D5A7-ABA5-4EFC-B8B7-5AA99DF5F2D8} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{B99AF132-C7B5-497A-B69A-4D2CEB9F2860} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{B9AD1C60-1A52-4B2C-9C36-2F70380DBBDF} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{BB3CC019-AFE5-4B55-8EFF-2224386ED36F} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{BC554184-E114-4151-9DA5-CA76F23E2643} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{BCFCF7F8-F4E9-4853-B874-83C8065E39F0} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{CE1157ED-7ABB-4D8D-9DB9-2CC3D836CA7E} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{CE1B0FC7-D7DC-4805-8698-FC6F716D9870} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{D0635F0E-8D5E-4CC5-BE28-1784C517D981} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{D394578E-6368-43FC-9EE8-3E3F6C361314} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{DFFE6D04-F1EA-4078-84FE-9F2C0700F15A} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{EFF541BE-AFCF-49C7-A8E5-85FBAE9ACA0C} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{F6CE968B-8B96-4237-834D-A32A11131FBB} (Empty Folder)
Successfully deleted: C:\Users\C660\AppData\Local\{F73F7EC1-CDA4-46FE-BA31-9E5E94625022} (Empty Folder)
Successfully deleted: C:\Users\C660\Appdata\LocalLow\datamngr (Folder)
Deleted the following from C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\prefs.js
user_pref(browser.search.order.1, Search Results);
Registry: 2
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\Search\\SearchAssistant (Registry Value)
Successfully deleted: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{B95DCC18-23E7-4523-BB3D-183DBC08B8A9} (Registry Key)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 21.01.2016 at 15:38:18,44
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
21.01.2016, 15:50
| #8 |
| | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA FRST: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:18-01-2016
durchgeführt von C660 (Administrator) auf C660-SATELLITE (21-01-2016 15:41:43)
Gestartet von C:\Users\C660\Downloads
Geladene Profile: C660 (Verfügbare Profile: C660 & Mcx1-C660-SATELLITE & Gast & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Toshiba Europe GmbH) C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(TOSHIBA Corporation) C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Intel(R) Corporation) C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3944648 2015-06-12] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13885696 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [TosReelTimeMonitor] => C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe [38304 2010-12-14] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba TEMPRO] => C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe [1546720 2011-02-10] (Toshiba Europe GmbH)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [566696 2011-03-02] (TOSHIBA Corporation)
HKLM\...\Run: [TCrdMain] => C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe [973176 2010-12-15] (TOSHIBA Corporation)
HKLM\...\Run: [TosSENotify] => C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe [710040 2010-12-08] (TOSHIBA Corporation)
HKLM\...\Run: [TosVolRegulator] => C:\Program Files\TOSHIBA\TosVolRegulator\TosVolRegulator.exe [24376 2009-11-11] (TOSHIBA Corporation)
HKLM\...\Run: [Toshiba Registration] => C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe [150992 2011-03-28] (Toshiba Europe GmbH)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-06-24] (Realtek Semiconductor)
HKLM-x32\...\Run: [SVPWUTIL] => C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe [532480 2010-11-09] (TOSHIBA)
HKLM-x32\...\Run: [HWSetup] => C:\Program Files\TOSHIBA\Utilities\HWSetup.exe [423936 2010-03-04] (TOSHIBA Electronics, Inc.)
HKLM-x32\...\Run: [KeNotify] => C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe [34160 2010-08-16] (TOSHIBA CORPORATION)
HKLM-x32\...\Run: [ToshibaServiceStation] => C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe [1298816 2011-07-11] (TOSHIBA Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7021880 2016-01-20] (AVAST Software)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\Run: [HP Officejet 6600 (NET)] => C:\Program Files\HP\HP Officejet 6600\Bin\ScanToPCActivationApp.exe [2676584 2011-09-09] (Hewlett-Packard Co.)
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [232960 2015-10-30] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-01-20] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-01-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-01-20] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-01-20] (Microsoft Corporation)
Startup: C:\Users\C660\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2016-01-20]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
Startup: C:\Users\C660\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - .lnk [2015-12-18]
ShortcutTarget: Tintenwarnungen überwachen - .lnk -> C:\Program Files\HP\HP Officejet 6600\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
Startup: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-03-28]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-03-28]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-03-28]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
Startup: C:\Users\Mcx1-C660-SATELLITE\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TRDCReminder.lnk [2011-03-28]
ShortcutTarget: TRDCReminder.lnk -> C:\Program Files (x86)\TOSHIBA\TRDCReminder\TRDCReminder.exe (TOSHIBA Europe)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{e410272a-f70d-41b1-9afb-1b5dfae95159}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://toshiba.msn.com
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM -> {64D54645-841C-497C-ABA0-72BCEEDDCE39} URL = hxxp://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {B95DCC18-23E7-4523-BB3D-183DBC08B8A9} URL = hxxp://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> {5383B699-FB4F-4C57-8EA6-7506B8BF2C0A} URL = hxxp://www.amazon.de/gp/search?ie=UTF8&keywords={searchTerms}&tag=tochibade-win7-ie-search-21&index=blended&linkCode=ur2
SearchScopes: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> {6D9AEAB1-5455-4F4A-B9BC-D60DD6C738AF} URL = hxxp://rover.ebay.com/rover/1/707-44556-9400-9/4?satitle={searchTerms}
SearchScopes: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000 -> {94892747-3484-4BF3-A6C2-B50ED9B0D015} URL = hxxp://www.bing.com/search?q={searchTerms}&form=TSHMDF&pc=MATM&src=IE-SearchBox
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-12-15] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2015-05-09] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-01-20] (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2016-01-20] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2015-05-09] (Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-12-15] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-03] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-01-20] (AVAST Software)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2012-03-08] (Microsoft Corporation)
BHO-x32: Kein Name -> {B69F34DD-F0F9-42DC-9EDD-957187DA688D} -> Keine Datei
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2016-01-20] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-03] (Oracle Corporation)
BHO-x32: TOSHIBA Media Controller Plug-in -> {F3C88694-EFFA-4d78-B409-54B7B2535B14} -> C:\Program Files (x86)\TOSHIBA\TOSHIBA Media Controller Plug-in\TOSHIBAMediaControllerIE.dll [2010-12-05] (<TOSHIBA>)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default
FF SelectedSearchEngine:
FF Homepage: hxxp://www.google.de/
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_286.dll [2016-01-20] ()
FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2015-05-09] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2015-05-09] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_286.dll [2016-01-20] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [2014-05-26] (EA Digital Illusions CE AB)
FF Plugin-x32: @gamersfirst.com/LiveLauncher -> C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll [Keine Datei]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.66 -> C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIIPT.dll [2013-01-11] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Services\IPT\npIntelWebAPIUpdater.dll [2013-01-11] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-03] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-03] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-03] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-12-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2012-03-08] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2557430510-3623771520-2665204530-1000: @phonostar.de/phonostar -> C:\Program Files (x86)\phonostar-Player\npphonostarDetectNP.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-2557430510-3623771520-2665204530-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2013-05-31] ()
FF Extension: Print selected text - C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\extensions\pst@i1024a.pl.xpi [2015-04-26]
FF Extension: Adblock Plus - C:\Users\C660\AppData\Roaming\Mozilla\Firefox\Profiles\0sqr3ps3.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-20]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-01-20]
Chrome:
=======
CHR StartupUrls: Default -> "hxxps://de-de.facebook.com/"
CHR Profile: C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Präsentationen) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-08]
CHR Extension: (Google Docs) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-08]
CHR Extension: (Google Drive) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-27]
CHR Extension: (YouTube) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-07]
CHR Extension: (Google-Suche) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-30]
CHR Extension: (Google Tabellen) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-08]
CHR Extension: (Avira Browserschutz) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-01-20]
CHR Extension: (Google Docs Offline) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-12-16]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-12]
CHR Extension: (Adblock Plus) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\peielepacdigfhimglfncbljnbnibooi [2015-02-01]
CHR Extension: (Google Mail) - C:\Users\C660\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-20]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-01-20]
==================== Dienste (Nicht auf der Ausnahmeliste) ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-01-19] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [226440 2016-01-20] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2787512 2015-12-22] (Microsoft Corporation)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-08-04] (Nero AG)
R2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [1809920 2010-08-04] (Realsil Microelectronics Inc.) [Datei ist nicht signiert]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-03] (Macrovision Corporation) [Datei ist nicht signiert]
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2078216 2015-10-21] (Electronic Arts)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [166912 2013-10-17] () [Datei ist nicht signiert]
R2 SynTPEnhService; C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe [246472 2015-06-12] (Synaptics Incorporated)
R2 TemproMonitoringService; C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe [112080 2011-02-10] (Toshiba Europe GmbH)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)
R2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2014-09-29] (Intel(R) Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2016-01-20] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [97648 2016-01-20] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2016-01-20] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2016-01-20] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065208 2016-01-20] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [464256 2016-01-20] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [155304 2016-01-20] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [273784 2016-01-20] (AVAST Software)
S3 FsUsbExDisk; C:\Windows\SysWOW64\FsUsbExDisk.SYS [37344 2013-02-05] () [Datei ist nicht signiert]
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-06-17] (Intel Corporation)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-10-05] (Malwarebytes Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek )
R3 rtwlane_13; C:\Windows\System32\drivers\rtwlane_13.sys [3749888 2015-10-30] (Realtek Semiconductor Corporation )
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [42696 2015-06-12] (Synaptics Incorporated)
R3 Thotkey; C:\Windows\System32\drivers\Thotkey.sys [54424 2015-08-10] (Toshiba Corporation)
S3 TIEHDUSB; C:\Windows\System32\drivers\tiehdusb.sys [128512 2012-03-07] (Texas Instruments) [Datei ist nicht signiert]
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-01-21 15:42 - 2016-01-21 15:42 - 00000000 ____D C:\ProgramData\avastSWCUTemp
2016-01-21 15:38 - 2016-01-21 15:38 - 00007007 _____ C:\Users\C660\Desktop\JRT.txt
2016-01-21 15:33 - 2016-01-21 15:33 - 00066712 _____ C:\Users\C660\Desktop\AdwCleaner[C1].txt
2016-01-21 15:25 - 2016-01-21 15:29 - 00000000 ____D C:\AdwCleaner
2016-01-21 15:23 - 2016-01-21 15:23 - 00001028 _____ C:\Users\C660\Desktop\JRT02 - Verknüpfung.lnk
2016-01-21 15:21 - 2016-01-21 15:22 - 01600184 _____ (Malwarebytes) C:\Users\C660\Downloads\JRT02.exe
2016-01-21 15:21 - 2016-01-21 15:21 - 00001113 _____ C:\Users\C660\Desktop\adwcleaner_5.030 - Verknüpfung.lnk
2016-01-21 15:20 - 2016-01-21 15:41 - 00001043 _____ C:\Users\C660\Desktop\FRST64 - Verknüpfung.lnk
2016-01-21 15:20 - 2016-01-21 15:20 - 01505280 _____ C:\Users\C660\Downloads\adwcleaner_5.030.exe
2016-01-21 13:12 - 2016-01-21 13:13 - 00055991 _____ C:\Users\C660\Downloads\Addition.txt
2016-01-21 13:11 - 2016-01-21 15:41 - 00023481 _____ C:\Users\C660\Downloads\FRST.txt
2016-01-21 13:11 - 2016-01-21 15:41 - 00000000 ____D C:\FRST
2016-01-21 13:10 - 2016-01-21 13:10 - 02370560 _____ (Farbar) C:\Users\C660\Downloads\FRST64.exe
2016-01-21 11:27 - 2016-01-21 15:31 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-01-21 11:27 - 2016-01-21 11:28 - 00000000 ____D C:\Users\C660\Documents\Malwarebytes
2016-01-21 11:03 - 2016-01-21 11:03 - 00068039 _____ C:\Malwarebytes 1. Scan 21.01.16.txt
2016-01-20 21:46 - 2016-01-20 21:47 - 06805440 _____ (Piriform Ltd) C:\Users\C660\Downloads\ccsetup_513.exe
2016-01-20 21:40 - 2016-01-21 10:19 - 00192216 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2016-01-20 21:39 - 2016-01-20 21:39 - 00001182 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2016-01-20 21:39 - 2016-01-20 21:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware
2016-01-20 21:39 - 2016-01-20 21:39 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-01-20 21:39 - 2016-01-20 21:39 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware
2016-01-20 21:39 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2016-01-20 21:39 - 2015-10-05 09:50 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2016-01-20 21:39 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2016-01-20 21:35 - 2016-01-20 21:35 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-01-20 21:35 - 2016-01-20 21:35 - 00002131 _____ C:\Users\Public\Desktop\Acrobat Reader DC.lnk
2016-01-20 21:33 - 2016-01-20 21:33 - 01466656 _____ C:\Users\C660\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe
2016-01-20 21:11 - 2016-01-20 21:11 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2016-01-20 21:11 - 2016-01-20 21:11 - 00000000 ____D C:\Users\DefaultAppPool
2016-01-20 21:11 - 2015-12-04 19:05 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Media Center Programs
2016-01-20 21:11 - 2015-12-04 19:05 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Macromedia
2016-01-20 21:11 - 2015-12-04 19:05 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Local\Microsoft Help
2016-01-20 21:10 - 2016-01-20 21:24 - 01065208 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2016-01-20 21:10 - 2016-01-20 21:24 - 00464256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsp.sys
2016-01-20 21:10 - 2016-01-20 21:24 - 00097648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2016-01-20 21:10 - 2016-01-20 21:10 - 00386096 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-01-20 21:10 - 2016-01-20 21:10 - 00273784 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2016-01-20 21:10 - 2016-01-20 21:10 - 00155304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2016-01-20 21:10 - 2016-01-20 21:10 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2016-01-20 21:10 - 2016-01-20 21:10 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-01-20 21:10 - 2016-01-20 21:10 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-01-20 21:10 - 2016-01-20 21:10 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-01-20 21:10 - 2016-01-20 21:10 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2016-01-20 21:10 - 2016-01-20 21:10 - 00001986 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2016-01-20 21:10 - 2016-01-20 21:10 - 00001974 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2016-01-20 21:10 - 2016-01-20 21:10 - 00000000 ____D C:\Users\C660\AppData\Roaming\AVAST Software
2016-01-20 21:09 - 2016-01-20 21:09 - 00000000 ____D C:\ProgramData\AVAST Software
2016-01-20 21:09 - 2016-01-20 21:09 - 00000000 ____D C:\Program Files\AVAST Software
2016-01-20 21:01 - 2016-01-20 21:09 - 161199128 _____ (AVAST Software) C:\Users\C660\Downloads\avast_free_antivirus_setup.exe
2016-01-17 18:17 - 2016-01-17 18:17 - 00000000 ____D C:\Program Files\DIFX
2016-01-17 18:17 - 2012-03-07 10:07 - 00128512 _____ (Texas Instruments) C:\WINDOWS\system32\Drivers\tiehdusb.sys
2016-01-17 18:17 - 2012-02-17 14:01 - 01060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71.dll
2016-01-17 18:17 - 2012-02-17 14:01 - 01047552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71u.dll
2016-01-17 18:17 - 2012-02-17 14:01 - 00499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2016-01-17 18:17 - 2012-02-17 14:01 - 00348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2016-01-17 18:17 - 2012-02-17 14:01 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl71.dll
2016-01-14 19:51 - 2016-01-14 19:52 - 01466656 _____ C:\Users\C660\Downloads\WAV To MP3 - CHIP-Installer.exe
2016-01-14 15:47 - 2016-01-05 03:51 - 07477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2016-01-14 15:47 - 2016-01-05 03:51 - 01317640 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2016-01-14 15:47 - 2016-01-05 03:51 - 01141496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2016-01-14 15:47 - 2016-01-05 03:50 - 01173344 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2016-01-14 15:47 - 2016-01-05 03:50 - 00713568 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2016-01-14 15:47 - 2016-01-05 03:50 - 00671472 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2016-01-14 15:47 - 2016-01-05 03:49 - 00513888 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2016-01-14 15:47 - 2016-01-05 03:48 - 00499432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2016-01-14 15:47 - 2016-01-05 03:45 - 02587696 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml6.dll
2016-01-14 15:47 - 2016-01-05 03:42 - 02026736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msxml6.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 00858952 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 00848160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsvr.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 00785088 _____ (Microsoft Corporation) C:\WINDOWS\system32\evr.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 00245840 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2016-01-14 15:47 - 2016-01-05 03:37 - 00234504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2016-01-14 15:47 - 2016-01-05 03:36 - 00808800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2016-01-14 15:47 - 2016-01-05 03:33 - 02180128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2016-01-14 15:47 - 2016-01-05 03:33 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2016-01-14 15:47 - 2016-01-05 03:33 - 00709688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsvr.dll
2016-01-14 15:47 - 2016-01-05 03:33 - 00701384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2016-01-14 15:47 - 2016-01-05 03:33 - 00652312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\evr.dll
2016-01-14 15:47 - 2016-01-05 03:33 - 00208176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2016-01-14 15:47 - 2016-01-05 03:33 - 00116728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2016-01-14 15:47 - 2016-01-05 03:31 - 00703840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2016-01-14 15:47 - 2016-01-05 03:27 - 01594408 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2016-01-14 15:47 - 2016-01-05 03:24 - 00796352 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2016-01-14 15:47 - 2016-01-05 03:23 - 01804664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMALFXGFXDSP.dll
2016-01-14 15:47 - 2016-01-05 03:23 - 01309376 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2016-01-14 15:47 - 2016-01-05 03:23 - 00786696 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMADMOD.DLL
2016-01-14 15:47 - 2016-01-05 03:23 - 00119320 _____ (Microsoft Corporation) C:\WINDOWS\system32\MP3DMOD.DLL
2016-01-14 15:47 - 2016-01-05 03:21 - 01371792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2016-01-14 15:47 - 2016-01-05 03:17 - 00695752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMADMOD.DLL
2016-01-14 15:47 - 2016-01-05 03:16 - 00100160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MP3DMOD.DLL
2016-01-14 15:47 - 2016-01-05 02:59 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2016-01-14 15:47 - 2016-01-05 02:57 - 16986112 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2016-01-14 15:47 - 2016-01-05 02:57 - 00076288 _____ (Microsoft Corporation) C:\WINDOWS\system32\RMSRoamingSecurity.dll
2016-01-14 15:47 - 2016-01-05 02:57 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgrcli.dll
2016-01-14 15:47 - 2016-01-05 02:56 - 00145920 _____ (Microsoft Corporation) C:\WINDOWS\system32\omadmclient.exe
2016-01-14 15:47 - 2016-01-05 02:54 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2016-01-14 15:47 - 2016-01-05 02:53 - 00148992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2016-01-14 15:47 - 2016-01-05 02:52 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2016-01-14 15:47 - 2016-01-05 02:51 - 00472576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DscCore.dll
2016-01-14 15:47 - 2016-01-05 02:51 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2016-01-14 15:47 - 2016-01-05 02:50 - 00644096 _____ (Microsoft Corporation) C:\WINDOWS\system32\uReFS.dll
2016-01-14 15:47 - 2016-01-05 02:50 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2016-01-14 15:47 - 2016-01-05 02:50 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2016-01-14 15:47 - 2016-01-05 02:49 - 13018624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2016-01-14 15:47 - 2016-01-05 02:49 - 01582080 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2016-01-14 15:47 - 2016-01-05 02:49 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOE.DLL
2016-01-14 15:47 - 2016-01-05 02:49 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll
2016-01-14 15:47 - 2016-01-05 02:49 - 00749056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneService.dll
2016-01-14 15:47 - 2016-01-05 02:49 - 00167936 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProximityCommon.dll
2016-01-14 15:47 - 2016-01-05 02:48 - 01009152 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMSPDMOD.DLL
2016-01-14 15:47 - 2016-01-05 02:48 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2016-01-14 15:47 - 2016-01-05 02:48 - 00034816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usermgrcli.dll
2016-01-14 15:47 - 2016-01-05 02:47 - 00628736 _____ (Microsoft Corporation) C:\WINDOWS\system32\MessagingDataModel2.dll
2016-01-14 15:47 - 2016-01-05 02:47 - 00479232 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2016-01-14 15:47 - 2016-01-05 02:47 - 00305664 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2016-01-14 15:47 - 2016-01-05 02:45 - 00678912 _____ (Microsoft Corporation) C:\WINDOWS\system32\qedit.dll
2016-01-14 15:47 - 2016-01-05 02:45 - 00275968 _____ (Microsoft Corporation) C:\WINDOWS\system32\facecredentialprovider.dll
2016-01-14 15:47 - 2016-01-05 02:44 - 00125440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2016-01-14 15:47 - 2016-01-05 02:43 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2016-01-14 15:47 - 2016-01-05 02:43 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-01-14 15:47 - 2016-01-05 02:43 - 00584704 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2016-01-14 15:47 - 2016-01-05 02:42 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2016-01-14 15:47 - 2016-01-05 02:41 - 18677760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2016-01-14 15:47 - 2016-01-05 02:41 - 01070080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOE.DLL
2016-01-14 15:47 - 2016-01-05 02:41 - 00558592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\uReFS.dll
2016-01-14 15:47 - 2016-01-05 02:40 - 00890880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMSPDMOD.DLL
2016-01-14 15:47 - 2016-01-05 02:40 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ProximityCommon.dll
2016-01-14 15:47 - 2016-01-05 02:39 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2016-01-14 15:47 - 2016-01-05 02:39 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2016-01-14 15:47 - 2016-01-05 02:39 - 00498176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MessagingDataModel2.dll
2016-01-14 15:47 - 2016-01-05 02:39 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2016-01-14 15:47 - 2016-01-05 02:38 - 00389120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2016-01-14 15:47 - 2016-01-05 02:36 - 00573440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qedit.dll
2016-01-14 15:47 - 2016-01-05 02:36 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2016-01-14 15:47 - 2016-01-05 02:33 - 01674240 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2016-01-14 15:47 - 2016-01-05 02:30 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2016-01-14 15:47 - 2016-01-05 02:30 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2016-01-14 15:47 - 2016-01-05 02:29 - 03667456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2016-01-14 15:47 - 2016-01-05 02:28 - 07826432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2016-01-14 15:47 - 2016-01-05 02:28 - 04894720 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2016-01-14 15:47 - 2016-01-05 02:28 - 01542656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2016-01-14 15:47 - 2016-01-05 02:25 - 05660160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2016-01-11 14:21 - 2016-01-20 22:23 - 00000000 ____D C:\Users\C660\Documents\Seminarfach
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-01-21 15:35 - 2015-02-01 15:30 - 00001144 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-01-21 15:32 - 2014-10-19 11:19 - 00000000 ____D C:\Users\C660\AppData\Local\HTC MediaHub
2016-01-21 15:31 - 2015-12-04 19:16 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-21 15:31 - 2012-10-06 11:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2016-01-21 15:30 - 2015-10-30 07:28 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-01-21 15:30 - 2014-05-24 12:48 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-01-21 15:23 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-01-21 15:11 - 2015-12-04 18:51 - 02113470 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-01-21 15:11 - 2015-10-30 19:35 - 00899256 _____ C:\WINDOWS\system32\perfh007.dat
2016-01-21 15:11 - 2015-10-30 19:35 - 00201706 _____ C:\WINDOWS\system32\perfc007.dat
2016-01-21 15:11 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2016-01-21 13:25 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-01-21 13:13 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2016-01-21 13:00 - 2015-02-01 15:30 - 00001148 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-01-21 12:48 - 2013-05-28 20:28 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-01-20 22:40 - 2015-12-04 18:43 - 00364992 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-20 22:38 - 2011-06-01 11:47 - 00000000 ____D C:\Program Files (x86)\Intel
2016-01-20 22:25 - 2015-12-21 21:23 - 00000000 ____D C:\Users\C660\Documents\Leistungsdiagnostik
2016-01-20 22:25 - 2012-12-30 12:01 - 00000000 ____D C:\Users\C660\Documents\Word sachen
2016-01-20 22:22 - 2013-08-14 18:30 - 00000000 ____D C:\Users\C660\Documents\Pdf Sachen
2016-01-20 22:18 - 2014-04-27 13:19 - 00002350 _____ C:\WINDOWS\System32\Tasks\{4C840634-7379-420B-BB1E-D6A0B1F7DF85}
2016-01-20 22:18 - 2013-12-27 13:22 - 00002528 _____ C:\WINDOWS\System32\Tasks\{27477227-33A9-43D1-9CDE-F7666EAEC1AE}
2016-01-20 21:57 - 2015-08-10 21:42 - 00000000 ____D C:\Users\C660\AppData\Local\Packages
2016-01-20 21:51 - 2013-10-08 12:56 - 00000000 ____D C:\WINDOWS\uninstall
2016-01-20 21:50 - 2014-08-18 15:58 - 00000000 ____D C:\Users\C660\AppData\Local\Adobe
2016-01-20 21:47 - 2015-12-07 11:15 - 00000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-01-20 21:35 - 2014-12-28 18:21 - 00003972 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2016-01-20 21:34 - 2011-03-28 16:15 - 00000000 ____D C:\ProgramData\Adobe
2016-01-20 21:34 - 2011-03-28 16:15 - 00000000 ____D C:\Program Files (x86)\Adobe
2016-01-20 21:07 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-01-20 21:04 - 2013-02-22 20:18 - 00000000 ____D C:\Program Files (x86)\Avira
2016-01-20 21:03 - 2015-12-04 18:52 - 00000000 ____D C:\Users\C660
2016-01-20 21:03 - 2014-08-14 12:02 - 00000000 ____D C:\ProgramData\Package Cache
2016-01-20 21:03 - 2011-12-02 18:07 - 00000000 ____D C:\ProgramData\Avira
2016-01-20 21:01 - 2013-12-12 17:26 - 00000000 ____D C:\Program Files\Microsoft Office 15
2016-01-20 20:22 - 2012-05-18 17:51 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-01-20 20:22 - 2012-05-18 17:51 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2016-01-20 20:20 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2016-01-20 20:20 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2016-01-20 20:20 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2016-01-20 20:20 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2016-01-19 17:35 - 2015-02-03 14:08 - 00000000 ____D C:\Users\C660\AppData\Roaming\.minecraft
2016-01-15 20:59 - 2013-08-14 18:40 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-01-15 18:06 - 2011-07-23 12:31 - 143671360 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-01-15 18:01 - 2015-08-10 21:32 - 00002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-01-14 19:54 - 2013-10-08 13:28 - 00000000 ____D C:\WAV To MP3
2016-01-14 19:54 - 2013-10-08 13:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WAV To MP3
2016-01-14 16:19 - 2012-05-18 17:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-01-14 16:18 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2016-01-11 14:51 - 2011-07-23 11:37 - 00000000 ____D C:\Users\C660\AppData\Local\Microsoft Help
2016-01-05 21:49 - 2015-12-04 18:38 - 00000000 ____D C:\Windows.old
2016-01-03 02:40 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2016-01-03 02:40 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2016-01-02 13:06 - 2014-11-14 20:17 - 00000000 ____D C:\Users\C660\Desktop\Spiele
2015-12-30 11:53 - 2015-12-04 18:42 - 00000000 ___DC C:\WINDOWS\Panther
2015-12-22 16:39 - 2014-04-23 17:52 - 00000000 ____D C:\Users\C660\Documents\Nachhilfe
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2013-01-11 15:13 - 2013-01-11 15:13 - 0022464 _____ (Intel Corporation) C:\Users\C660\AppData\Roaming\JomCap.dll
2013-01-05 18:30 - 2013-01-05 18:30 - 0000092 _____ () C:\Users\C660\AppData\Local\fusioncache.dat
2012-10-12 15:03 - 2015-04-03 22:48 - 0007601 _____ () C:\Users\C660\AppData\Local\resmon.resmoncfg
2013-08-09 16:39 - 2013-08-09 16:39 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-12-04 18:48 - 2015-12-04 18:48 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2011-07-08 11:34 - 2011-07-08 11:34 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
2012-06-29 22:23 - 2012-06-29 22:23 - 0001534 _____ () C:\ProgramData\ss.ini
Einige Dateien in TEMP:
====================
C:\Users\C660\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-01-20 22:53
==================== Ende von FRST.txt ============================
Addition: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:18-01-2016
durchgeführt von C660 (2016-01-21 13:12:30)
Gestartet von C:\Users\C660\Downloads
Windows 10 Home (X64) (2015-12-04 18:21:49)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-2557430510-3623771520-2665204530-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2557430510-3623771520-2665204530-1002 - Limited - Enabled)
C660 (S-1-5-21-2557430510-3623771520-2665204530-1000 - Administrator - Enabled) => C:\Users\C660
DefaultAccount (S-1-5-21-2557430510-3623771520-2665204530-503 - Limited - Disabled)
Gast (S-1-5-21-2557430510-3623771520-2665204530-501 - Limited - Disabled) => C:\Users\Gast
HomeGroupUser$ (S-1-5-21-2557430510-3623771520-2665204530-1004 - Limited - Enabled)
Mcx1-C660-SATELLITE (S-1-5-21-2557430510-3623771520-2665204530-1006 - Limited - Enabled) => C:\Users\Mcx1-C660-SATELLITE
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Out of date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Out of date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20056 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 13.0.0.83 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.286 - Adobe Systems Incorporated)
Apple Application Support (32-Bit) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2245 - AVAST Software)
Avira (HKLM-x32\...\{0696cc37-db90-4000-be99-4a173ca7c8af}) (Version: 1.1.39.17987 - Avira Operations GmbH & Co. KG)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.4.0 - EA Digital Illusions CE AB)
Bluetooth Stack for Windows by Toshiba (HKLM\...\{CEBB6BFB-D708-4F99-A633-BC2600E01EF6}) (Version: v9.10.32(T) - TOSHIBA CORPORATION)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.13 - Piriform)
Complément Messenger (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Contrôle ActiveX Windows Live Mesh pour connexions à distance (HKLM-x32\...\{55D003F4-9599-44BF-BA9E-95D060730DD3}) (Version: 15.4.5722.2 - Microsoft Corporation)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
eBay (HKLM-x32\...\{FDE58148-57E7-43BF-879A-29CCE818C078}) (Version: 1.1.9 - eBay Inc.)
Empire: Total War (HKLM-x32\...\Steam App 10500) (Version: - The Creative Assembly)
FIFA 16 DEMO (HKLM-x32\...\{D09AD1AE-6AAC-45EB-B9F6-C1F223DD8481}) (Version: 1.0.0.0 - Electronic Arts)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.111 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Grand Theft Auto San Andreas (HKLM-x32\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Officejet 6600 - Grundlegende Software für das Gerät (HKLM\...\{C768E610-4DFB-4A60-A59B-71549EB7BF75}) (Version: 25.0.619.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (x32 Version: 1.00.0000 - Microsoft) Hidden
HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.13.0.003 - HTC Corporation)
HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.24.5 - HTC)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
Intel Extreme Tuning Utility (HKLM-x32\...\{ffa8daa3-4912-4a4a-aac4-a0549064268b}) (Version: 5.1.1.25 - Intel Corporation)
Intel Extreme Tuning Utility (x32 Version: 5.1.1.25 - Intel Corporation) Hidden
Intel(R) Identity Protection Technology 1.2.28.0 (HKLM-x32\...\{A87263E8-26CB-1016-8F2F-C04708B17CE2}) (Version: 1.2.28.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.25.1036 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.1.80.1213 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2291 - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\{3FD0C489-0F02-481a-A3E1-9754CD396761}) (Version: - Intel Corporation)
Intel® Watchdog Timer Driver (Intel® WDT) (HKLM-x32\...\3FD0C489-0F02-481a-A3E1-9754CD396761) (Version: - Intel Corporation)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java 7 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F06417071FF}) (Version: 7.0.710 - Oracle)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
Junk Mail filter update (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Malwarebytes Anti-Malware Version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes)
Mesh Runtime (x32 Version: 15.4.5722.2 - Microsoft Corporation) Hidden
Messenger Companion (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 - de-de (HKLM\...\ProPlusRetail - de-de) (Version: 15.0.4787.1002 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft-Maus- und Tastatur-Center (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Mozilla Firefox 43.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 43.0.1 (x86 de)) (Version: 43.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.1.5828 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MyFreeCodec (HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\MyFreeCodec) (Version: - )
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4787.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4787.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4787.1002 - Microsoft Corporation) Hidden
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.38.113.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7600.30123 - Realtek Semiconductor Corp.)
Realtek WLAN Driver (HKLM-x32\...\{9D3D8C60-A55F-4fed-B2B9-173001290E16}) (Version: 2.00.0013 - REALTEK Semiconductor Corp.)
Samsung Kies (x32 Version: 2.6.3.14044_16 - Samsung Electronics Co., Ltd.) Hidden
Skype™ 7.0 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.0.102 - Skype Technologies S.A.)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Spotify (HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\Spotify) (Version: 1.0.12.161.g64b0797c - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.10.0 - Synaptics Incorporated)
TeamSpeak 3 Client (HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\TeamSpeak 3 Client) (Version: 3.0.14 - TeamSpeak Systems GmbH)
Test Drive Unlimited (HKLM-x32\...\{C37A0BC1-52EE-4F97-8223-5CA9FC0357B0}) (Version: 1.00.0000 - Ihr Firmenname)
TOSHIBA Assist (HKLM-x32\...\{C2A276E3-154E-44DC-AAF1-FFDD7FD30E35}) (Version: 4.02.02 - TOSHIBA CORPORATION)
TOSHIBA ConfigFree (HKLM-x32\...\{F52618B2-A995-4F8D-A6C8-9E235A470C68}) (Version: 8.0.36 - TOSHIBA CORPORATION)
TOSHIBA Disc Creator (HKLM\...\{5DA0E02F-970B-424B-BF41-513A5018E4C0}) (Version: 2.1.0.6 for x64 - TOSHIBA Corporation)
TOSHIBA Face Recognition (HKLM-x32\...\InstallShield_{F67FA545-D8E5-4209-86B1-AEE045D1003F}) (Version: 3.1.8.64 - TOSHIBA Corporation)
TOSHIBA Flash Cards Support Utility (HKLM-x32\...\InstallShield_{620BBA5E-F848-4D56-8BDA-584E44584C5E}) (Version: 1.63.0.12C - TOSHIBA CORPORATION)
TOSHIBA Hardware Setup (HKLM-x32\...\InstallShield_{5279374D-87FE-4879-9385-F17278EBB9D3}) (Version: 1.63.1.34C - TOSHIBA CORPORATION)
TOSHIBA HDD/SSD Alert (HKLM-x32\...\InstallShield_{D4322448-B6AF-4316-B859-D8A0E84DCB38}) (Version: 3.1.64.7 - TOSHIBA Corporation)
Toshiba Manuals (HKLM-x32\...\{90FF4432-21B7-4AF6-BA6E-FB8C1FED9173}) (Version: 10.02 - TOSHIBA)
TOSHIBA Media Controller (HKLM-x32\...\{C7A4F26F-F9B0-41B2-8659-99181108CDE3}) (Version: 1.0.86.2 - TOSHIBA CORPORATION)
TOSHIBA Media Controller Plug-in (HKLM-x32\...\{F26FDF57-483E-42C8-A9C9-EEE1EDB256E0}) (Version: 1.0.6.1 - TOSHIBA CORPORATION)
TOSHIBA Recovery Media Creator (HKLM-x32\...\{B65BBB06-1F8E-48F5-8A54-B024A9E15FDF}) (Version: 2.1.3.10010 - TOSHIBA CORPORATION)
TOSHIBA Recovery Media Creator Reminder (HKLM-x32\...\InstallShield_{773970F1-5EBA-4474-ADEE-1EA3B0A59492}) (Version: 1.00.0019 - TOSHIBA)
TOSHIBA ReelTime (HKLM-x32\...\InstallShield_{24811C12-F4A9-4D0F-8494-A7B8FE46123C}) (Version: 1.7.17.64 - TOSHIBA Corporation)
TOSHIBA Resolution+ Plug-in for Windows Media Player (HKLM-x32\...\{6CB76C9D-80C2-4CB3-A4CD-D96B239E3F94}) (Version: 1.1.0 - TOSHIBA Corporation)
TOSHIBA Service Station (HKLM-x32\...\{AC6569FA-6919-442A-8552-073BE69E247A}) (Version: 2.2.14 - TOSHIBA)
TOSHIBA Supervisor Password (HKLM-x32\...\InstallShield_{51B4E156-14A5-4904-9AE4-B1AA2A0E46BE}) (Version: 1.63.51.2C - TOSHIBA CORPORATION)
TOSHIBA TEMPRO (HKLM-x32\...\{F082CB11-4794-4259-99A1-D91BA762AD15}) (Version: 3.35 - Toshiba Europe GmbH)
TOSHIBA Value Added Package (HKLM-x32\...\InstallShield_{066CFFF8-12BF-4390-A673-75F95EFF188E}) (Version: 1.5.4.64 - TOSHIBA Corporation)
TOSHIBA Web Camera Application (HKLM-x32\...\InstallShield_{6F3C8901-EBD3-470D-87F8-AC210F6E5E02}) (Version: 2.0.0.19 - TOSHIBA Corporation)
TOSHIBA Wireless LAN Indicator (HKLM-x32\...\{CDADE9BC-612C-42B8-B929-5C6A823E7FF9}) (Version: 1.0.3 - TOSHIBA CORPORATION)
TRORMCLauncher (HKLM-x32\...\InstallShield_{E65C7D8E-186D-484B-BEA8-DEF0331CE600}) (Version: - )
TRORMCLauncher (Version: 1.0.0.10 - TOSHIBA) Hidden
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Utility Common Driver (x32 Version: 1.0.52.2C - TOSHIBA) Hidden
VirtualDJ Home FREE (HKLM-x32\...\{A6AC699F-8315-40CA-8F70-E917494978AB}) (Version: 7.4 - Atomix Productions)
WAV To MP3 V2 (HKLM-x32\...\WAV To MP3_is1) (Version: - hxxp://www.WAVMP3.net)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3555.0308 - Microsoft Corporation)
Windows Live Mesh - ActiveX-besturingselement voor externe verbindingen (HKLM-x32\...\{C32CE55C-12BA-4951-8797-0967FDEF556F}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{2902F983-B4C1-44BA-B85D-5C6D52E2C441}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX control for remote connections (HKLM-x32\...\{C5398A89-516C-4DAF-BA07-EE7949090E56}) (Version: 15.4.5722.2 - Microsoft Corporation)
Windows Live Mesh ActiveX Control for Remote Connections (HKLM-x32\...\{C63A1E60-B6A4-440B-89A5-1FC6E4AC1C94}) (Version: 15.4.5722.2 - Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2557430510-3623771520-2665204530-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\C660\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0A32B78E-151F-4ACA-8D8D-99ED66997103} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {0BF0E06E-A783-4A83-8B51-06D687F4EA5C} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {11D942D0-0202-4953-B519-421AB4923EC7} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-26] (Google Inc.)
Task: {146F46E4-4BA2-4E03-A4D0-811E4F7B68A3} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {1D62E51A-37DA-46B8-BFBE-F0E83BD671BB} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated)
Task: {22F54B01-96C8-4F32-A6DF-B6A975CE905F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-27] (Microsoft Corporation)
Task: {24FC2031-5DAD-4FEB-9E21-A9259DC40C7C} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {2F83C0D5-F59E-4CC1-9554-45AD0F8F0282} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {33065BDC-AE46-45FE-AB19-6C3953EED060} - System32\Tasks\{B446D884-9211-4DA8-A278-4C0D785EF699} => Chrome.exe hxxp://ui.skype.com/ui/0/5.3.0.120.280/en/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;notincluded,google-chrome:notoffered;ienotdefaultbrowser2
Task: {383B19C8-D0F0-4A23-9216-B07613A016B6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-26] (Google Inc.)
Task: {3B36A037-EDA0-449D-B70D-28279EE24E44} - System32\Tasks\{27477227-33A9-43D1-9CDE-F7666EAEC1AE} => pcalua.exe -a "B:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2\bin\addoninstaller.exe" -d "B:\Program Files (x86)\Steam\steamapps\common\Left 4 Dead 2" -c /register
Task: {3C1328EE-ED95-4F16-B817-0236AB9FD5E4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-01-15] (Microsoft Corporation)
Task: {3DCB3BEB-F991-4831-9F60-5521D45B8888} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {40462866-339B-4B31-8E2A-1D84BC78F4A0} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {4522C2CF-F499-4F06-82CB-DE0DD3B327FE} - System32\Tasks\{4C840634-7379-420B-BB1E-D6A0B1F7DF85} => pcalua.exe -a C:\Users\C660\Downloads\Filius-Setup-1.5.4.exe -d C:\Users\C660\Downloads
Task: {4962458D-60F9-4993-857E-21D48AC557B7} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {496BFD4E-9399-4D23-A18D-1C8897632724} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {4BA94D1C-91D3-4DBB-9BF7-9996B782E354} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {4D75AF42-16B9-483B-A080-222633CFD4FE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {4E47E2BE-601D-42B9-BB08-188DB66EC23A} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {51593879-EB79-44BD-BFE3-CAB2A9B0D6FF} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-12-08] (Piriform Ltd)
Task: {537BA02C-20AC-424C-87DC-06BB62F50D61} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {566611E0-052B-4052-AE23-FD6B606FF603} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {57F498C4-20E2-4586-9681-4457D0EBA6F2} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {65A02571-1991-454D-9B25-50999BEAB3CD} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {66CC7C44-36CE-4FAC-9366-7FAC881AABA0} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {694C1AC8-D55F-4A68-9C6D-F2B6B302C639} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {69C802F3-94C5-47D0-B947-FA80EC4070DD} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {6E7EC7AD-F90A-4915-A506-154DBE63347C} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {6F1E87F7-5FEF-4BFD-B9D8-3443326DF209} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-27] (Microsoft Corporation)
Task: {73E9C22C-7C8F-48A9-B172-877C4D3EC8D4} - System32\Tasks\{79B7F7BD-EF24-49EC-9FD8-1009C76B2ECB} => C:\Program Files (x86)\Rockstar Games\Grand Theft Auto San Andreas\gta_sa.exe [2005-06-07] ()
Task: {76B37D0F-04AF-427A-A1A9-9B7F854F5B5A} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {80411427-E714-4502-BD88-AFB07BD071B6} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {80E8C892-A36B-4F15-B31F-6E8C1BB8DDD2} - System32\Tasks\Microsoft\Windows\Media Center\Extender\Update media permissions for Mcx1-C660-SATELLITE => C:\Windows\ehome\McxTask.exe
Task: {834A5824-38DE-47C0-A8C6-3BC7439D7F8C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {8DE18588-85AA-4F36-B3F8-0A5C4BAA6DF8} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-01-20] (Adobe Systems Incorporated)
Task: {8E5384E0-DFF0-4314-819B-326795A61DE4} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {9359A247-1A43-4924-8D7B-2773DB4A445A} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {94020E0C-DD41-4077-937F-E5560E6E2D7B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {989C50D2-D53D-4A8D-9E09-6C8E7105FE66} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {9E9F31FD-2944-4C38-842F-126170C9ED65} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {9F3FAF4E-D46E-4236-B1E3-4876450F24E9} - \ConfigFree Startup Programs -> Keine Datei <==== ACHTUNG
Task: {A0CD8D4D-9B6C-4AF3-910B-AD63AEF3A853} - System32\Tasks\{608AEE60-9F1D-40A8-ADAE-1B582A14EA02} => Firefox.exe hxxp://ui.skype.com/ui/0/5.3.0.120/en/abandoninstall?page=tsMain&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:offered-installed;madedefault
Task: {A3F791AE-5D61-4483-9AD0-E8A0E57F8158} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {B136FA39-A475-42CD-A950-02E33C721F6B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {B5E41781-CCAB-4E7F-83D4-59FA9236A834} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {C41FF9E2-9E3E-4625-A8B6-3D33136D718E} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {C6CD496B-507A-4677-A9FC-13C917D1DB2F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {C7E1FF56-265E-4A24-BC16-17954935440E} - System32\Tasks\{24AA1454-41C5-4D7C-9407-688D19857517} => pcalua.exe -a E:\SETUP.EXE -d E:\
Task: {CC8EEBDF-9A63-4EDD-817F-DA9D82326F09} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-01-20] (AVAST Software)
Task: {CDAD0717-88E3-44AE-BE43-8BD7C05A46EF} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {D69EB2D2-E782-4B75-8649-69D665C3E027} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-12-22] (Microsoft Corporation)
Task: {E6F5BC82-12AE-4AB2-8591-AF351AA21434} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {EAEB87BD-FD6F-40A9-A9FF-661823466227} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => C:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {EBD79B9A-1467-4E15-BCF6-C1ED766B8619} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {EED2C01E-CA45-4E7B-A2AE-97EC454DAE58} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-12-22] (Microsoft Corporation)
Task: {EF1265EB-6A9C-4C96-B758-DAF67ABC5474} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {F16D33FE-FB4A-4745-99E2-E6D64F4B16B2} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {F1AAF8CD-21C0-43B7-A487-85798333B1E3} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-03-20 17:12 - 2015-03-20 17:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 17:12 - 2015-03-20 17:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-04-08 15:09 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2013-10-17 14:27 - 2013-10-17 14:27 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2015-12-05 10:55 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-05 10:55 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2014-08-06 12:42 - 2014-08-06 12:42 - 00821600 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
2015-12-18 16:44 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-12-18 16:44 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-01-14 15:47 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-01-14 15:47 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-01-14 15:47 - 2016-01-05 02:24 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-01-14 15:47 - 2016-01-05 02:26 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-06-01 20:00 - 2015-06-01 20:00 - 00102912 _____ () C:\Windows\System32\IccLibDll_x64.dll
2010-11-18 16:18 - 2010-11-18 16:18 - 11190784 _____ () C:\Program Files\TOSHIBA\FlashCards\BlackPng.dll
2010-12-08 14:42 - 2010-12-08 14:42 - 00079264 _____ () C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosIPCWraper.dll
2016-01-20 21:10 - 2016-01-20 21:10 - 00103888 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2016-01-20 21:10 - 2016-01-20 21:10 - 00125512 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2016-01-20 21:13 - 2016-01-20 21:13 - 02818048 _____ () C:\Program Files\AVAST Software\Avast\defs\16012001\algo.dll
2016-01-20 21:10 - 2016-01-20 21:10 - 00469008 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2016-01-21 12:02 - 2016-01-21 12:02 - 02818048 _____ () C:\Program Files\AVAST Software\Avast\defs\16012100\algo.dll
2014-08-06 12:40 - 2014-08-06 12:40 - 00031080 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll
2014-08-06 12:41 - 2014-08-06 12:41 - 00607376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll
2014-08-06 12:41 - 2014-08-06 12:41 - 00059752 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll
2014-08-06 12:41 - 2014-08-06 12:41 - 00036216 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll
2014-08-06 12:42 - 2014-08-06 12:42 - 00080248 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll
2014-08-06 12:44 - 2014-08-06 12:44 - 00129376 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll
2014-08-06 12:46 - 2014-08-06 12:46 - 00223592 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll
2016-01-20 21:10 - 2016-01-20 21:10 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\Control Panel\Desktop\\Wallpaper -> c:\users\c660\appdata\roaming\mozilla\firefox\desktop-hintergrund.bmp
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKU\S-1-5-21-2557430510-3623771520-2665204530-1000\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{61AA3966-1625-46EC-A7DF-7813AD5E7050}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7F7B8E1C-F3E3-43F9-8315-CFAF54F21F95}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{91AC7473-92CA-4311-B9A8-F75F750C05C9}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{382FDCCD-C40A-4FE3-A1CC-394AD03BE649}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{691DF62F-47DE-4616-B1AC-27598E6C7BCB}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{0673035E-A51F-4873-8FC3-8FD7DCDD891E}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{6AEEF892-0E26-45B7-86DF-7C92D06AD717}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 16 DEMO\fifasetup\fifaconfig.exe
FirewallRules: [{DF05EEF0-AAA4-474B-B9D4-46DAC6A2B1DF}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 16 DEMO\fifasetup\fifaconfig.exe
FirewallRules: [{B5861369-72CB-4D96-8466-D074A302F6A0}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{CCF62871-2616-4DC9-A5AB-42896EA14AFB}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{11C2F16C-B1F6-45B5-A5A3-704B8FA38A7C}] => (Allow) LPort=2869
FirewallRules: [{C2BA6A53-054F-4E0A-915E-C9FF66815614}] => (Allow) LPort=1900
FirewallRules: [{B3693E23-4D08-41D7-B734-2FAED8EC0F98}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{73DA9A6E-A8AB-4F76-9FB9-E4ACA1655AFC}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [TCP Query User{20989EF4-7E5D-4248-B20E-C0E5CCA425AC}C:\program files (x86)\virtualdj\virtualdj_home.exe] => (Block) C:\program files (x86)\virtualdj\virtualdj_home.exe
FirewallRules: [UDP Query User{E01F5E1E-349A-46B3-B443-3A50B27BABEE}C:\program files (x86)\virtualdj\virtualdj_home.exe] => (Block) C:\program files (x86)\virtualdj\virtualdj_home.exe
FirewallRules: [TCP Query User{13C29D65-F7F1-4C0A-9FF2-8CDE6C4CCF4A}C:\users\c660\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\c660\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{F7A8405D-C2F1-4EC4-8485-2AA2AEF32492}C:\users\c660\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\c660\appdata\roaming\spotify\spotify.exe
FirewallRules: [{6A987701-D241-4B40-A7C4-1590D0693FDF}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{D64A8F47-60E0-43F7-B941-015BF3A4279E}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{C8F799EE-28AC-41D5-BE89-2ECA70D71E16}] => (Allow) B:\Assassin's Creed II\AssassinsCreedIIGame.exe
FirewallRules: [{712E5D25-5008-460A-85EF-6554C63DFDB7}] => (Allow) B:\Assassin's Creed II\AssassinsCreedIIGame.exe
FirewallRules: [{C56BEC27-D776-41D6-9C66-30A967A1CBA3}] => (Allow) B:\Assassin's Creed II\AssassinsCreedII.exe
FirewallRules: [{3E1BB866-95EE-42AD-A4AA-86F3FB546A62}] => (Allow) B:\Assassin's Creed II\AssassinsCreedII.exe
FirewallRules: [{2B0AEE32-5869-4AA0-B067-DC62523DE56F}] => (Allow) B:\Assassin's Creed II\UPlayBrowser.exe
FirewallRules: [{5A61B872-73FC-49A7-B817-24A810A67DD4}] => (Allow) B:\Assassin's Creed II\UPlayBrowser.exe
FirewallRules: [{8A158788-AB60-4588-88C5-0056512F2068}] => (Allow) B:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{049B2480-A433-4F33-ADD8-97ACCA3086A4}] => (Allow) B:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A4E0257C-74C9-4930-8BAC-E48B22228FD0}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{CA7D3D3A-EAA3-499C-827A-1AE1847EF22D}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{0058E476-FD05-4DC3-8116-98CB4C5C4D1F}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{67FB7CF0-C7E6-4343-8939-E19C2D14D851}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{CE73D4DC-2D87-42D0-BB87-2F5998B53B54}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{530B6D7F-9FA2-4449-B25D-2D3AA323A9B6}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{180068F7-5AFE-4806-975A-EF0B7B3A8ED8}] => (Allow) C:\Program Files\HP\HP Officejet 6600\Bin\DeviceSetup.exe
FirewallRules: [{ABF5C119-18AD-4AB7-9CD7-811B86965408}] => (Allow) C:\Program Files\HP\HP Officejet 6600\Bin\HPNetworkCommunicator.exe
FirewallRules: [TCP Query User{6E8971BB-E66A-4D00-A44D-61B023F5A3EC}C:\users\c660\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\c660\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{D958113B-F816-4175-AB63-760D50B82DFD}C:\users\c660\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\c660\appdata\roaming\spotify\spotify.exe
FirewallRules: [{A48F85C3-CAF5-47D9-93AF-BB256E8B8B85}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{C2E715FF-E05D-427F-859A-0F2909E8AC37}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [TCP Query User{FF130EFF-5FA1-4C09-BC31-C61533C9FC3E}C:\program files\java\jre7\bin\javaw.exe] => (Block) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{59616DD3-206C-4B3E-A656-B7269A2DC0DA}C:\program files\java\jre7\bin\javaw.exe] => (Block) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{5D78872F-B982-40A1-976C-AB98287F8D2C}B:\program files (x86)\steam\steam.exe] => (Allow) B:\program files (x86)\steam\steam.exe
FirewallRules: [UDP Query User{0A11722F-405E-4D77-AE0C-923127D45517}B:\program files (x86)\steam\steam.exe] => (Allow) B:\program files (x86)\steam\steam.exe
FirewallRules: [{752F203D-8FF5-43D2-AA82-C4CE8161810D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{C6FD3DF0-D669-4F6C-9B15-9594B2B26BD0}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe
FirewallRules: [{677005C1-DBBD-4BB7-A37C-2B229ECD8A29}] => (Allow) B:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe
FirewallRules: [{5763018D-4470-46CA-8E68-EFBB455A60C8}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{710BCF9B-581D-46C4-B199-7F5A23749712}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{EF6BCCAC-9E1C-4CA3-B8C5-07B569C98A77}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{28B6E8A3-8247-4316-BD9F-CBECA8B7DE3F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{D9456238-6510-4CC1-9A91-363FC87AD9D4}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{F84E9DE0-D017-4D09-9BB2-22F0DB7EFE0E}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{DCCA68AC-93E6-46B5-BAE0-36B7F06C164B}C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe] => (Allow) C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe
FirewallRules: [UDP Query User{1232594F-8D06-4ED5-B9EF-2CC3F5FEB509}C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe] => (Allow) C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe
FirewallRules: [{8546E375-B32D-4EEC-9FCD-2003E0B817BA}] => (Block) C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe
FirewallRules: [{ED630D36-1402-423D-9200-542B7A90066C}] => (Block) C:\program files (x86)\atari\test drive unlimited\testdriveunlimited.exe
FirewallRules: [{A0606591-86C6-49A9-BFB9-19601745AF60}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5AD7DB5B-B7DD-4B8C-94B9-A83031636549}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{79FFFB1E-AE01-45CC-851F-FF203E69FB13}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{4F80FB83-217A-406E-B234-8AC86352BD86}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{FB932008-DD8B-40AC-8E15-F38C98885256}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe
FirewallRules: [{C46EC070-F2C5-4BE6-85BD-CFFA38F6166B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7E0CFBB4-A1A7-4002-A176-F890EEFF04ED}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D7028CBE-9738-4BF5-9A4B-F623A0A19D05}] => (Allow) B:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{31F422B1-ACB5-47AA-A46E-CD0994CB69D4}] => (Allow) B:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{D8AA66A2-5684-4EB7-B065-031E11477E52}B:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) B:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{94888B5C-0857-4691-BD95-3466DBA2F302}B:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) B:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{D20D350D-082D-4638-91C5-5D29FD5E4DDF}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{91099417-3E88-42DA-9D21-43B88A27AA85}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Wiederherstellungspunkte =========================
14-01-2016 16:16:58 Windows Update
17-01-2016 18:16:47 Installed TI Connect™
20-01-2016 21:53:09 Removed eBay
==================== Fehlerhafte Geräte im Gerätemanager =============
Name: Synaptics PS/2 Port TouchPad
Description: Synaptics PS/2 Port TouchPad
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Synaptics
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (01/21/2016 10:12:55 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: C660-Satellite)
Description: Bei der Aktivierung der App „Microsoft.Windows.Photos_8wekyb3d8bbwe!App“ ist folgender Fehler aufgetreten: -2144927142. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.
Error: (01/21/2016 10:12:54 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm Microsoft.Photos.exe, Version 15.1208.10480.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 1ec8
Startzeit: 01d1542bd17c2968
Beendigungszeit: 4294967295
Anwendungspfad: C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
Berichts-ID: 19582a1f-c01f-11e5-9bd2-b870f466cabd
Vollständiger Name des fehlerhaften Pakets: Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe
Auf das fehlerhafte Paket bezogene Anwendungs-ID: App
Error: (01/20/2016 10:53:42 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" in Zeile UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.
Error: (01/20/2016 10:44:00 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service
Error: (01/20/2016 10:44:00 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: Der Dienst TMachInfo wurde nicht auf dem Computer . gefunden.
Error: (01/20/2016 09:53:42 PM) (Source: MsiInstaller) (EventID: 11001) (User: C660-Satellite)
Description: Product: eBay -- Error 1001. Error 1001. Beim Initialisieren der Installation ist eine Ausnahme aufgetreten:
System.IO.FileNotFoundException: Die Datei oder Assembly "file:///C:\Program Files (x86)\eBay\eBay.exe" oder eine Abhängigkeit davon wurde nicht gefunden. Das System kann die angegebene Datei nicht finden.(NULL)(NULL)(NULL)(NULL)(NULL)
Error: (01/20/2016 09:53:24 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".
Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.
System Error:
Zugriff verweigert
.
Error: (01/20/2016 09:21:14 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service
Error: (01/20/2016 09:21:14 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: Der Dienst TMachInfo wurde nicht auf dem Computer . gefunden.
Error: (01/20/2016 09:07:45 PM) (Source: TOSHIBA Service Station) (EventID: 0) (User: )
Description: TSS Load: could not communicate with TMachInfo service
Systemfehler:
=============
Error: (01/20/2016 10:40:23 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (01/20/2016 10:39:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_3366e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/20/2016 10:39:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _3366e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/20/2016 10:39:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_3366e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/20/2016 10:39:07 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_3366e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/20/2016 09:24:04 PM) (Source: DCOM) (EventID: 10016) (User: C660-Satellite)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}C660-SatelliteC660S-1-5-21-2557430510-3623771520-2665204530-1000LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (01/20/2016 09:24:03 PM) (Source: DCOM) (EventID: 10016) (User: C660-Satellite)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}C660-SatelliteC660S-1-5-21-2557430510-3623771520-2665204530-1000LocalHost (unter Verwendung von LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (01/20/2016 09:18:00 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
%%1058
Error: (01/20/2016 09:16:54 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_306bb" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/20/2016 09:05:10 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "NetPipeActivator" wurde aufgrund folgenden Fehlers nicht gestartet:
%%1053
CodeIntegrity:
===================================
Date: 2016-01-20 22:21:26.900
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-20 20:24:32.952
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-06 20:50:58.968
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-31 10:56:55.163
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-11 21:14:30.617
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-10 14:43:25.799
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-08 15:28:57.154
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-07 12:21:16.571
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-06 11:31:11.891
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2015-12-04 19:16:32.867
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-2410M CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 34%
Installierter physikalischer RAM: 8099.76 MB
Verfügbarer physikalischer RAM: 5317.22 MB
Summe virtueller Speicher: 10099.76 MB
Verfügbarer virtueller Speicher: 6571.28 MB
==================== Laufwerke ================================
Drive b: (Volume) (Fixed) (Total:229.44 GB) (Free:185.72 GB) NTFS
Drive c: (WINDOWS) (Fixed) (Total:232.88 GB) (Free:90.52 GB) NTFS
Drive d: (Data) (Fixed) (Total:3.05 GB) (Free:0 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: DB8CF73D)
Partition 1: (Active) - (Size=400 MB) - (Type=27)
Partition 2: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=3 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=229.4 GB) - (Type=OF Extended)
==================== Ende von Addition.txt ============================
|
|
21.01.2016, 16:44
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA FRST-Fix Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter Task: {3DCB3BEB-F991-4831-9F60-5521D45B8888} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {57F498C4-20E2-4586-9681-4457D0EBA6F2} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {65A02571-1991-454D-9B25-50999BEAB3CD} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {66CC7C44-36CE-4FAC-9366-7FAC881AABA0} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {834A5824-38DE-47C0-A8C6-3BC7439D7F8C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {8E5384E0-DFF0-4314-819B-326795A61DE4} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {94020E0C-DD41-4077-937F-E5560E6E2D7B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {9F3FAF4E-D46E-4236-B1E3-4876450F24E9} - \ConfigFree Startup Programs -> Keine Datei <==== ACHTUNG
Task: {B5E41781-CCAB-4E7F-83D4-59FA9236A834} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {C41FF9E2-9E3E-4625-A8B6-3D33136D718E} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {C6CD496B-507A-4677-A9FC-13C917D1DB2F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {F1AAF8CD-21C0-43B7-A487-85798333B1E3} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
21.01.2016, 16:56
| #10 |
| | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA Fixlog: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:18-01-2016
durchgeführt von C660 (2016-01-21 16:49:39) Run:1
Gestartet von C:\Users\C660\Downloads
Geladene Profile: C660 (Verfügbare Profile: C660 & Mcx1-C660-SATELLITE & Gast & DefaultAppPool)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
Task: {3DCB3BEB-F991-4831-9F60-5521D45B8888} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {57F498C4-20E2-4586-9681-4457D0EBA6F2} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {65A02571-1991-454D-9B25-50999BEAB3CD} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {66CC7C44-36CE-4FAC-9366-7FAC881AABA0} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {834A5824-38DE-47C0-A8C6-3BC7439D7F8C} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {8E5384E0-DFF0-4314-819B-326795A61DE4} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {94020E0C-DD41-4077-937F-E5560E6E2D7B} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {9F3FAF4E-D46E-4236-B1E3-4876450F24E9} - \ConfigFree Startup Programs -> Keine Datei <==== ACHTUNG
Task: {B5E41781-CCAB-4E7F-83D4-59FA9236A834} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {C41FF9E2-9E3E-4625-A8B6-3D33136D718E} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {C6CD496B-507A-4677-A9FC-13C917D1DB2F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {F1AAF8CD-21C0-43B7-A487-85798333B1E3} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
emptytemp:
*****************
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{3DCB3BEB-F991-4831-9F60-5521D45B8888}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3DCB3BEB-F991-4831-9F60-5521D45B8888}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{57F498C4-20E2-4586-9681-4457D0EBA6F2}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{57F498C4-20E2-4586-9681-4457D0EBA6F2}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{65A02571-1991-454D-9B25-50999BEAB3CD}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{65A02571-1991-454D-9B25-50999BEAB3CD}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{66CC7C44-36CE-4FAC-9366-7FAC881AABA0}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{66CC7C44-36CE-4FAC-9366-7FAC881AABA0}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{834A5824-38DE-47C0-A8C6-3BC7439D7F8C}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{834A5824-38DE-47C0-A8C6-3BC7439D7F8C}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8E5384E0-DFF0-4314-819B-326795A61DE4}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8E5384E0-DFF0-4314-819B-326795A61DE4}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{94020E0C-DD41-4077-937F-E5560E6E2D7B}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{94020E0C-DD41-4077-937F-E5560E6E2D7B}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9F3FAF4E-D46E-4236-B1E3-4876450F24E9}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9F3FAF4E-D46E-4236-B1E3-4876450F24E9}" => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ConfigFree Startup Programs => Schlüssel nicht gefunden.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B5E41781-CCAB-4E7F-83D4-59FA9236A834}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B5E41781-CCAB-4E7F-83D4-59FA9236A834}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C41FF9E2-9E3E-4625-A8B6-3D33136D718E}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C41FF9E2-9E3E-4625-A8B6-3D33136D718E}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C6CD496B-507A-4677-A9FC-13C917D1DB2F}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C6CD496B-507A-4677-A9FC-13C917D1DB2F}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F1AAF8CD-21C0-43B7-A487-85798333B1E3}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F1AAF8CD-21C0-43B7-A487-85798333B1E3}" => Schlüssel erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d" => Schlüssel erfolgreich entfernt
EmptyTemp: => 146.7 MB temporäre Dateien entfernt.
Das System musste neu gestartet werden.
==== Ende von Fixlog 16:49:56 ====
|
|
21.01.2016, 22:06
| #11 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA Okay, dann Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte: 1. Schritt: MBAM Downloade Dir bitte  Malwarebytes Anti-Malware
2. Schritt: ESET ESET Online Scanner
3. Schritt: SecurityCheck Downloade Dir bitte  SecurityCheck und:
__________________ Logfiles bitte immer in CODE-Tags posten |
|
22.01.2016, 19:56
| #12 |
| | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA Ich habe nun erst den Mbam-Scan durchgeführt und die gefundenen Objekte in die Quarantäne verschoben. Danach habe ich den Eset-Scan durchgeführt. Als ich nun das Scan-Protokoll von Mbam heraussuchen wollte, gab es nur eins von gestern morgen. Das Protokoll von Eset habe ich. Soll ich Mbam nun einfach noch einmal durchlaufen lassen? Eset: Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=35597547ef14ed409aab7837837a1618
# end=init
# utc_time=2016-01-22 01:26:24
# local_time=2016-01-22 02:26:24 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internetCan not open internetESETSmartInstaller@High as downloader log:
Can not open internet# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=35597547ef14ed409aab7837837a1618
# end=init
# utc_time=2016-01-22 02:23:31
# local_time=2016-01-22 03:23:31 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 27768
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=35597547ef14ed409aab7837837a1618
# end=updated
# utc_time=2016-01-22 02:27:43
# local_time=2016-01-22 03:27:43 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=35597547ef14ed409aab7837837a1618
# engine=27768
# end=stopped
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-01-22 04:36:30
# local_time=2016-01-22 05:36:30 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 88 154605 163635 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 7250478 12451870 0 0
# scanned=223986
# found=5
# cleaned=0
# scan_time=7726
sh=664270A860DDB3D6F23F617D0615070330A71A30 ft=1 fh=192f7aaecaa32147 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert.dll.vir"
sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert0.dll.vir"
sh=E2CA99C04B7F0BDC5B4E3C1A6022993F9EF221EA ft=1 fh=7f12ca511a9fcada vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\C660\Downloads\Disk Defrag - CHIP-Installer.exe"
sh=9378BCF8FAEEBEAC2DEC656AE796DF23B1A95714 ft=1 fh=77e8b37af5c1ff78 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\C660\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe"
sh=69E8576D9C072BB8DAFC017923A184A1B3598ABC ft=1 fh=c53a24cb2046524b vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\C660\Downloads\WAV To MP3 - CHIP-Installer.exe"
ESETSmartInstaller@High as downloader log:
Can not open internetESETSmartInstaller@High as downloader log:
Can not open internet# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=35597547ef14ed409aab7837837a1618
# end=init
# utc_time=2016-01-22 04:37:50
# local_time=2016-01-22 05:37:50 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
Update Finalize
Updated modules version: 27771
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=35597547ef14ed409aab7837837a1618
# end=updated
# utc_time=2016-01-22 04:38:17
# local_time=2016-01-22 05:38:17 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=35597547ef14ed409aab7837837a1618
# engine=27771
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-01-22 06:46:08
# local_time=2016-01-22 07:46:08 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1='avast! Antivirus'
# compatibility_mode=783 16777213 71 88 162383 171413 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 7258256 12459648 0 0
# scanned=224848
# found=5
# cleaned=5
# scan_time=7671
sh=664270A860DDB3D6F23F617D0615070330A71A30 ft=1 fh=192f7aaecaa32147 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert.dll.vir"
sh=97BCCD25561F44E9B13F05F6EEF083C9CE9BA529 ft=1 fh=641f1fb3d2e699c4 vn="Win32/Toolbar.Conduit.Y evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\AdwCleaner\Quarantine\C\Program Files (x86)\Conduit\Community Alerts\Alert0.dll.vir"
sh=E2CA99C04B7F0BDC5B4E3C1A6022993F9EF221EA ft=1 fh=7f12ca511a9fcada vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\C660\Downloads\Disk Defrag - CHIP-Installer.exe"
sh=9378BCF8FAEEBEAC2DEC656AE796DF23B1A95714 ft=1 fh=77e8b37af5c1ff78 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\C660\Downloads\Malwarebytes Anti Malware Malware Scanner - CHIP-Installer.exe"
sh=69E8576D9C072BB8DAFC017923A184A1B3598ABC ft=1 fh=c53a24cb2046524b vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung (Gesäubert durch Löschen)" ac=C fn="C:\Users\C660\Downloads\WAV To MP3 - CHIP-Installer.exe"
|
|
22.01.2016, 20:29
| #13 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA Naja, so wichtig ist das jetzt auch nicht. Wenn waren da nur ein paar Reste. Mach noch SC bitte.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
22.01.2016, 20:34
| #14 |
| | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA SC: Code:
ATTFilter Results of screen317's Security Check version 1.009
x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Defender
avast! Antivirus
Antivirus up to date! (On Access scanning disabled!)
`````````Anti-malware/Other Utilities Check:`````````
Java 8 Update 40
Java version 32-bit out of Date!
Adobe Flash Player 20.0.0.286
Mozilla Firefox (43.0.4)
Google Chrome (47.0.2526.106)
Google Chrome (47.0.2526.111)
````````Process Check: objlist.exe by Laurent````````
Windows Defender MSMpEng.exe
Windows Defender MpCmdRun.exe
AVAST Software Avast AvastSvc.exe
AVAST Software Avast AvastUI.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: %
````````````````````End of Log``````````````````````
|
|
22.01.2016, 21:01
| #15 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malwarebytes: 360 PUP´s & Trojan.Agent.FSA Brauchst du Java noch? Die meisten brauch dieses Zeugs nicht. Also runter damit.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Malwarebytes: 360 PUP´s & Trojan.Agent.FSA |
| angezeigt, anhänge, avast, beste, besten, container, durchgeführt, einfach, gestern, heute, hänge, langsamer, laptop, malwarebytes, morgen, namen, richtig, systemscan, troja, verschieben, virus, vorgehen, win, win32, win32:adware-gen[adw] |
Linear-Darstellung
